Answer
The secondary site needs more than compute capacity. Buyers should confirm network paths, remote access, security controls, backup or replication currency, application dependencies, user validation steps, contact trees, and the people who can execute the runbook when production is unavailable.
The site is only ready if the team has proven those dependencies together. A recovery target that looks complete on paper but has never been exercised end to end is still a risk.