Which of the following statements is true regarding disaster recovery plans?

Disaster recovery plans are crucial for ensuring that businesses can continue to operate after a disruptive event. The statement that these plans need to include regular updates and tests is true because the business environment, technology, and potential threats are constantly evolving. Regular updates ensure that the plan remains relevant and effective in addressing the current risks faced by the organization. Testing the plan is essential to validate that all members of the organization understand their roles during a disaster and that the procedures work as intended. This practice also allows for identifying any weaknesses in the plan that need to be addressed.

In contrast, testing the plan just once or infrequently can lead to critical oversights, as the plan may not perform effectively under real-world conditions. Additionally, disaster recovery plans are not limited to large businesses; all organizations, regardless of size, can face disruptions and therefore should have an actionable and tested plan. Lastly, while infrastructure is a key focus, a comprehensive disaster recovery plan must also address aspects such as data backup, staff responsibilities, communication strategies, and business continuity to be truly effective.