Question: Describe who is responsible for disaster recovery planning and how often exercises should be held. What assets in an organization are included in business continuity and disaster recovery planning? How do efforts from the Computer Incident Response team relate to risk management?