Which of the following BEST helps to ensure the effective execution of an organization's disaster recovery plan (DRP)?

For a disaster recovery plan (DRP) to be executed effectively, it must be accessible to the recovery team at the moment it is needed. A disaster event may render the primary facility and all its resources, including the DRP documentation, inaccessible or destroyed. Therefore, ensuring that current copies of all DRP procedures are available at the designated failover/recovery location is the most critical factor for enabling the team to begin and carry out the recovery process. Without access to the plan, execution would rely on memory and improvisation, severely undermining its effectiveness and the organization's ability to recover in a timely and orderly manner.

A. Management review is essential for alignment and resource allocation, but it does not directly ensure the plan can be practically executed during a crisis.

B. Using industry best practices provides a solid foundation for a plan, but it does not guarantee the plan is tested, tailored, or accessible for effective execution.

C. Documentation is a prerequisite for having a plan, but its mere existence is useless if the recovery team cannot access it during a disaster.

1. ISACA

CISM Review Manual

15th Edition. In Domain 3: Information Security Program Development and Management

the section on Business Continuity and Disaster Recovery Planning emphasizes the need for plan maintenance and distribution. It states

"Copies of the BCP/DRP should be stored in a secure

accessible

off-site location." This directly supports the principle that the plan must be available where it will be executed.

2. National Institute of Standards and Technology (NIST) Special Publication 800-34 Rev. 1

Contingency Planning Guide for Federal Information Systems. Section 3.5

"Plan Maintenance

" explicitly states

"The contingency plan should be stored at an off-site location and at an alternate storage facility... The plan should be readily accessible to all personnel who have a role in the plan." This highlights accessibility at the recovery location as a critical component for successful execution.

3. Uhlig

R.

et al. (2004). IT-Service Continuity Management. Springer. In the chapter on "The IT-SCM Process

" the authors discuss the implementation phase

noting that "all plans and procedures must be available at the recovery sites" to be of any use during an actual invocation of the plan. This academic source reinforces the practical necessity of having procedures available at the failover location.