Audit tabletop exercise results, trace small incidents through the response process, and review process design for completeness and trained alternates

Rely solely on the IT director's assurance that the team is prepared

Skip the engagement because there is no evidence to evaluate

Issue a clean opinion because no incidents have occurred