A “critical application” is one that MUST

A.
Remain operational for the organization to survive.

B.
Be subject to continual program maintenance.

C.
Undergo continual risk assessments.

D.
Be constantly monitored by operations management.

Explanation:
I am assuming that I don’t need to put a reference for this answer. Yeah ok here it is but I cheated
and used a earlier reference “A BIA is performed at the beginning of disaster recovery and continuity
planning to identify the areas that would suffer the greatest financial or operational loss in the event
of a disaster or disruption. It identifies the company’s critical systems needed for survival and
estimates the outage time that can be tolerated by the company as a result of disaster or
disruption.” – Shon Harris All-in-one CISSP Certification Guide pg 597