Do you maintain a formal DRP policy?
Please provide a copy of the policy
When was the last time a DRP simulation was conducted?
Does the organization store the backup at a remote location?
Which type of backup does the organization configure and how often the backup is done?
Does the company perform backup regularly?
Does the company restore data periodically?
Are data backups encrypted on media before removal from a secured facility?
Does the company have policies and procedures for backup?