Which of the following is the PRIMARY concern if a business continuity plan (BCP) is not based on a business impact analysis (BIA)?

A. The critical systems were not identified, but all systems are covered in the BCP.
B. The knowledge of key people within the organization was not considered in the BCP.
C. The strategy of the BCP does not reflect estimated potential losses.
D. Management was not involved in the early stages of the BCP.