Which of the following steps is NOT one of the four steps of a Business Impact Analysis (BIA)?

A.
Notifying senior management

B.
Gathering the needed assessment materials

C.
Performing the vulnerability assessment

D.
Analyzing the information compiled

Explanation:
“A BIA generally takes the form of these four steps:
Pg. 383 Krutz: CISSP Prep Guide: Gold Edition.