Which of the following should be determined FIRST when establishing a business continuity program?

A.
Cost to rebuild information processing facilities

B.
Incremental daily cost of the unavailability of systems

C.
Location and cost of offsite recovery facilities

D.
Composition and mission of individual recovery teams

Explanation:

Prior to creating a detailed business continuity plan, it is important to determine the incremental daily cost oflosing different systems. This will allow recovery time objectives to be determined which, in turn, affects the location and cost of offsite recovery facilities, and the composition and mission of individual recovery teams.
Determining the cost to rebuild information processing facilities would not be the first thing to determine.