GCFA · Question #177
Which of the following statements best describes the consequences of the disaster recovery plan test?
The correct answer is D. If no deficiencies were found during the test, then the test was probably flawed. A disaster recovery plan test that finds zero deficiencies almost certainly reflects an inadequate test, not a flawless plan, because all real-world plans contain gaps that a rigorous test should uncover.
Question
Which of the following statements best describes the consequences of the disaster recovery plan test?
Options
- AIf no deficiencies were found during the test, then the plan is probably perfect.
- BThe results of the test should be kept secret.
- CThe plan should not be changed no matter what the results of the test would be.
- DIf no deficiencies were found during the test, then the test was probably flawed.
How the community answered
(39 responses)- A5% (2)
- B8% (3)
- C13% (5)
- D74% (29)
Why each option
A disaster recovery plan test that finds zero deficiencies almost certainly reflects an inadequate test, not a flawless plan, because all real-world plans contain gaps that a rigorous test should uncover.
A zero-deficiency result does not confirm plan perfection; it is far more likely a sign the test lacked breadth or realism rather than evidence that all failure modes were covered.
Test results must be documented and shared with relevant stakeholders so that identified gaps can be addressed and lessons learned are incorporated into plan revisions.
The entire purpose of testing is to discover deficiencies and drive plan updates; refusing to modify the plan regardless of results renders the testing process meaningless.
Complex IT environments always carry risk of undiscovered gaps in a DR plan; if a test finds no deficiencies, the most probable explanation is that the test scenarios were too narrow, too scripted, or insufficiently challenging to expose those gaps. A well-designed test deliberately stresses the plan under realistic conditions, and such conditions almost always reveal at least minor weaknesses. Treating a clean result as evidence of plan quality rather than test inadequacy leads to false confidence.
Concept tested: Disaster recovery plan testing and continuous improvement
Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.