Which of the following would an IS auditor consider to be the MOST important to review when conducting a business continuity audit? 

Answer options:

A. A hot site contracted and available as needed.
B. A business continuity manual is available and current.
C. insurance coverage is adequate and premiums are current.
D. Media backups are performed on a timely basis and stored offsite.

D

Without data to process, all other components of the recovery effort are in vain. Even in the absence of a plan, recovery efforts of any type would not be practical without data to process.