Procedure Step:Testing

Audit Step:

Determine whether the agency has conducted adequate simulation tests for the application to ensure business continuity and disaster recovery plans work as expected, and to verify that users understand their respective roles in the recovery process.

Purpose:

To determine whether the agency has reasonable assurance that its business continuity/disaster recovery procedures will function as intended.