[Bernard]

A plan is not a plan until it is tested. And the point of a DR or BC test is not to "pass" - it's to see what the decision makers available during the test do to work around "when stuff happens". Because most plans don't work.

I was observing a full mainframe DR for a large Chicago bank and the first problem was that the remote back-up storage contractor lost tapes 1, 2, and 3. That's pretty much the part of the recovery that tells the computer that it's a computer. The solution? Call the data center and have them cut tapes 1, 2 and 3 and send them to the recovery site.

Sometimes the audit reports just write themselves.

[.44 Special]

Had to be careful about how far to take the explanation or you just lose people. My belief is that contracted recovery centers are probably the best bet if practical for your scenario. Main objective is to keep management out of ITs hair and let them get on with recovery. People/organizations think it will never happen to them. Best to you in the New Year.