Which of the following events prompts a review of the disaster recovery plan (DRP)?

Adding members to a steering committee is an administrative governance change that does not alter the organization's critical systems, infrastructure, or recovery requirements that a DRP addresses.

Completion of a security policy review is a policy lifecycle event that updates security controls and standards but does not inherently change the systems, facilities, or processes that the DRP is designed to recover.

A change in senior management affects organizational leadership and decision-making authority but does not by itself alter the technical infrastructure, critical business functions, or recovery requirements documented in the DRP.

An organizational merger introduces new systems, personnel, facilities, infrastructure dependencies, and business processes that directly impact recovery time objectives (RTOs), recovery point objectives (RPOs), and overall DRP scope. The merged entity may have entirely different critical assets and recovery requirements that render the existing DRP incomplete or invalid. This makes a full DRP review mandatory to ensure continuity coverage aligns with the new combined organization.