Infrastructure

How often do you test your business continuity and disaster recovery plans?

How to answer this security questionnaire question, with an expert response your security or GRC team can adapt.

Built for GRC, customer trust and sales engineering teams.

Security questionnaire questions

Updated July 21, 2026

Expert answer

State a defined test cadence (commonly an annual full disaster recovery exercise with restore verification, plus more frequent backup-restore checks), and confirm that each test produces a documented report with measured recovery times compared against your RTO and RPO targets. Reviewers want evidence the plan has actually been executed, so reference the date and outcome of your most recent test.

Answer every security questionnaire in minutes

Wolfia drafts accurate, cited answers to security questionnaires and RFPs from your existing documentation. See it work on your own questions.

Book an exploratory call

Related infrastructure questions

Where is your infrastructure hosted (AWS, GCP, Azure)?Do you use a web application firewall (WAF)?How do you protect against DDoS attacks?Do you have logging and monitoring in place?How do you secure your CI/CD pipeline?What vulnerability scanning do you perform?
Browse the full security questionnaire question library
Get started

Take the waiting out of your sales cycle

See Wolfia answer your security questionnaires, RFPs, contract redlines and trust center requests. Unlimited seats and outcome-based pricing.

Book a demo