The Vital Records Protection Program Is Designed to Protect and Provide

The vital records protection program is designed to protect and provide the information needed by the company for survival in a disaster or emergency. Periodic vital records protection program tests must be provided for to determine the adequacy of the protection program. Which of the following observations is incorrect?

A) The company security officer, records manager, and internal auditor should test or evaluate the program at least once a year.
B) Every effort should be made to make test conditions as realistic as feasible.
C) Specifically, the test should determine that the company's various vital information needs can be satisfied in a typical emergency situation.
D) The test period should not be limited in time but should be extended as long as needed.
E) The test should be located off of company premises, if possible.