Audit checklist for Disaster Recovery (DR) testing

Is all the user representatives included in the DR test?

Is all the critical DR activities, the sequence and time required to completed the tasks documented? For example Pre-restoration activities, restoration activities, checking of reports after restoration, system configuration and setup of user profile, installation of necessary tools, etc.

Is the system performance monitored in terms of time required to complete the necessary tasks? Is it within the estimated time?

Can the necessary reports and documents be printed successfully?

Have the users representative and IT personnel sign-off the test?

Project Management - auditor involvement

When reviewing the software development or acquisition process, the IT auditor or any auditor involved in the project should:-

• obtain the documentation from the various phases
• attend the project meetings
• offer advice to the project team on control and risk related issues
• assess the project team's ability to produce the key deliverables by the promised dates (in the project timeline or project plan