An organization is requesting the development of a disaster recovery plan. The organization has grown and so has its
infrastructure. Documentation, policies, and procedures do not exist. Which of the following steps should be taken to assist in the development of the disaster recovery plan?
A. Conduct a risk assessment.
B. Develop a data retention policy.
C. Execute vul
nerability scanning.
D. Identify assets.
Explanation: