Which one of the following is not one of the outcomes of a vulnerability analysis?

Which one of the following is not one of the outcomes of a vulnerability analysis?

A.
Quantative loss assessment

B.
Qualitative loss assessment

C.
Formal approval of BCP scope and initiation document

D.
Defining critical support areas