Key elements of a business impact analysis should include which of the following tasks?

A.
Develop recovery strategies, prioritize recovery, create test plans, post-test evaluation, and
update processes.

B.
Identify institutional and regulatory reporting requirements, develop response teams and
communication trees, and develop press release templates.

C.
Employ regular preventive measures such as patch management, change management,
antivirus and vulnerability scans, and reports to management.

D.
Identify critical assets systems and functions, identify dependencies, determine critical
downtime limit, define scenarios by type and scope of impact, and quantify loss potential.