When developing a business continuity plan (BCP), which of the following tools should be used to gain an
understanding of the organization’s business processes?

A.
Business continuity self-audit

B.
Resource recovery analysis

C.
Risk assessment

D.
Gap analysis

Explanation:
Risk assessment and business impact assessment are tools for understanding business-for-business
continuity planning. Business continuity self-audit is a tool for evaluating the adequacy of the BCP, resource
recovery analysis is a tool for identifying a business resumption strategy, while the role gap analysis can play in
business continuity planning is to identify deficiencies in a plan. Neither of these is used for gaining an
understanding of the business.