While most companies will agree that performing a recovery audit is a best practice, I am amazed at how many large companies ($1b and higher) I speak with that have not performed a recovery engagement within the past three years. While this is not based on a formal study, I would estimate that 1 out of 4 companies I have spoken with have not performed an audit in at least three years. I find this quite surprising. But what you may find even more surprising (or not) are some of the reasons.