Business Continuity Plan Audit Question Checklist

"Have procedures been documented for disaster control and recovery?
Do these procedures protect against fire and other hazards for the data center, data files, and programs?
Does the management has formally approved the BCP documentation?
Does adequate review is done to ensure the plan is current?"
"Evaluate the scope of each Plan and the assumptions that were used to develop each Plan. The assumptions represent the base conditions that must exist in order for the Plans to work.

Typical assumptions may include:
(a) Worst Case Interruption;
(b) Level of Plan Detail;
(c) File Backup;
(d) Off-Site Inventory;
(e) Contingency Strategy;
(f) Communications Network;
(g) Business Impact Analysis;
(h) Outsource vendor computer processing recovery.

Determine if adequate documentation is contained within the plan to address all of the above assumptions.
"
Download