Disaster recovery and business continuity auditing