An information security manager developing an incident response plan MUST ensure it includes:

A. an inventory of critical data
B. criteria for escalation
C. critical infrastructure diagrams
D. a business impact analysis