Which of the following provides the BKST confirmation that the business continuity/disaster recovery plan objectives have been achieved?
A . The recovery time objective (RTO) was not exceeded during testing
B . Objective testing of the business continuity/disaster recovery plan has been carried out consistently
C . The recovery point objective (RPO) was proved inadequate by disaster recovery plan testing
D . Information assets have been valued and assigned to owners per the business continuity plan, disaster recovery plan
Answer: A
Explanation:
Consistent achievement of recovery time objective (RTO) objectives during testing provides the most objective evidence that business continuity/disaster recovery plan objectives have been achieved. The successful testing of the business continuity/disaster recover) plan within the stated RTO objectives is the most indicative evidence that the business needs are being met. Objective testing of the business continuity/ disaster recovery plan will not serve as a basis for evaluating the alignment of the risk management process in business continuity/disaster recovery planning. Mere valuation and assignment of information assets to owners (per the business continuity/disaster recovery plan) will not serve as a basis for evaluating the alignment of the risk management process in business continuity/disaster recovery planning.