An organization wants to know whether responders can execute recovery steps, not merely describe them. Which exercise provides stronger evidence?

1. A meeting reviewing only the playbook's table of contents
2. A controlled functional recovery exercise with defined safeguards and success criteria
3. A vendor brochure comparison
4. A policy acknowledgment email