During an information security audit, an auditor discovers that the current disaster recovery plan was developed three years ago but never tested. There have be...