Question 164
Main Page
An auditor asks for evidence of regular DR testing. What’s the most appropriate document to provide?
A. Security roadmap
B. SOC escalation policy
C. DRP test reports with outcomes and lessons learned
D. Vendor invoice
Answer: DRP test reports with outcomes and lessons learned
Test reports demonstrate actual testing activities, results, and follow-ups, meeting audit expectations.