Which of the following BEST contributes to the implementation of an effective risk response action plan?

A. A business impact analysis.
B. An IT tactical plan.
C. Disaster recovery and continuity testing.
D. Assigned roles and responsibilities.