Which statement is least appropriate?

The IS auditor’s role in disaster planning is to:

a. recommend that a plan is in place

b. independently test this plan

c. call out key contacts in the event of an emergency

d. review the contract with the facility’s supplier along with any tendering arrangements

e. review the extent to which the plan is understood by all participants

f. advise the disaster committee on any security implications that may need to be addressed.