Which primary element of BCP includes carrying out vulnerability analysis?

Which primary element of BCP includes carrying out vulnerability analysis?

A.
Scope and Plan Initiation

B.
Business Impact Assessment

C.
Business Continuity Plan Development

D.
Plan Approval and Implementation