In last month’s column, I introduced the task of auditing business-continuity plans and disaster-recovery programs by providing an overview of what an effective program consists of, what the typical internal auditor’s roles in BCP and DR are, and what the key audit-scoping issues are. We’re going to complete the discussion this month by providing further guidance regarding audit-planning efforts, audit-fieldwork activities, and the reporting of results and improvement efforts.
