An organization is requesting the development of a disaster recovery plan. The organization has grown and so has its infrastructure. Documentation, policies, and procedures do not exist. Which of the following steps should be taken to assist in the development of the disaster recovery plan?

A.
Conduct a risk assessment.

B.
Develop a data retention policy.

C.
Execute vulnerability scanning.

D.
Identify assets.

Explanation: