CAIQ v4 Control BCM-08 Extractive Review Standard

How to answer 'When was your last full Disaster Recovery test conducted?' on a CAIQ

Reviewer Guidance & Pitfalls

Provide the date of the most recent annual DR test, the scope tested (database restore from snapshot, DNS failover), and state that results met RTO/RPO targets.

Example Answer Passing Enterprise Audit

Compliant Response Template
Our latest annual Disaster Recovery failover test was conducted in [month/year], successfully validating database restoration and DNS failover within our target 4-hour RTO (SOC 2, A1.3).

Filling out a CAIQ or SIG Lite right now?

QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.

Zero spam. 100% confidential. No credit card required.