Which of the following should be of GREATEST concern to a risk practitioner reviewing an organization's disaster recovery plan (DRP)?
Risk scenarios used for the plan were last tested two years ago.
The IT steering committee determined the application recovery priorities.
The disaster recovery plan (DRP) does not identify a hot site.
The call list in the plan was last updated a year ago.
Submit