Which of the following should an organization perform to forecast the effects of a disaster?

A. Analyze capability maturity model gaps.
B. Define recovery time objectives (RTO).
C. Develop a business impact analysis (BIA).
D. Simulate a disaster recovery.