It is often a challenge for internal audit functions to assess resilience across their complex technology estates. However, whilst technology skills are at the heart of the disaster recovery (and indeed cyber) topics, internal audit functions increasingly find the impact of these reviews is significantly enhanced by engaging business stakeholders, in areas such as communications, public relations and crisis management.