Organizations can use the questions included in this tool to evaluate their IT disaster recovery plan.
Sample questions include: Did you follow an industry-standard disaster recovery (DR) methodology? Which methodology did you use? Did you perform a business impact assessment (BIA) to prioritize your business processes? Were business process owners consulted during the BIA? Did you perform a risk management review to identify and correct obvious weaknesses? Did you prepare a recovery options list that itemizes recovery options by business processes? Did management approve the final DR options? Does your DR plan include a disaster organization chart that defines recovery teams?
Risk & Control Matrices - RCMs
Business Continuity Management RCM
Disaster Recovery Audit Work Program
Policies & Procedures