Which activity is not the responsibility of IT Service Continuity Management?

A.
analyzing risks

B.
executing impact analyses of incidents related to the back-out facilities

C.
drawing up back-out scenarios

D.
testing back-out arrangements