An IS auditor is evaluating an organization's disaster recovery program. The DR plan has been documented and updated after a recent infrastructure refresh, but the organization has never executed a live failover to the alternate site because operations staff fear disrupting production services. Which testing approach should the auditor recommend as the MOST effective next step to validate recovery capability while minimizing operational risk?