Which of the following BEST supports the risk assessment process to determine criticality of an asset?

A. Threat assessment
B. Residual risk analysis
C. Vulnerability assessment
D. Business impact analysis (BIA)