During a Disaster Recovery (DR) assessment, additional coverage for assurance is required. What should en assessor do?

Increasing the number and type of staff interviewed may broaden perspectives but does not inherently provide deeper or more reliable assurance coverage, as interviews are subjective and anecdotal compared to examining the actual DRP documentation.

Conducting a comprehensive examination of the DRP directly addresses the need for additional assurance coverage because it involves a thorough review of the actual documented procedures, recovery objectives, roles, and controls that constitute the DR program. This provides substantive, documentary evidence beyond interviews alone, ensuring the assessor can validate that DR capabilities are formally defined, tested, and adequate. A comprehensive DRP examination is the primary artifact-based assurance activity in a DR assessment.

Increasing interview question detail only refines the verbal evidence already being gathered and does not expand coverage to documentary or technical evidence sources needed for additional assurance.

Reviewing the DR policy addresses high-level governance intent rather than the operational procedures and specific recovery capabilities documented in the DRP, making it insufficient for comprehensive assurance coverage.