C. access to computer files d. all of the above 18. Disaster recovery plans that may not be of much use if, a. they are not fully documented. b. the organization does not have a cold site for relocation purposes c. the organization does not expect any natural disasters to occur d. they are not tested periodically and revised when necessary 19. Which of the following is not a computer facility control ? a. Place the data processing center where unauthorized individuals cannot gain entry b. Limit access to the data processing center to all employees of the company C. Buy insurance to protect against loss of equipment in a computer facility d. Use advanced technology to identify individuals who are authorized access to the data processing center 20. Organizations use controls to prevent, detect, and correct errors and irregularities in transactions are processed. a. specific b. general c. application d. input