What steps does your backup operator take to perform a restore?
Where are the backups stored and how often are the audited for accuracy?
How often are your security programs monitored?
What is the procedure for a DoS? Virus infection? Disgruntled employee?
Who on your legal team would you call? Do they know you?
Is your incident response team call sheet up to date?"