An application owner was specified the acceptable downtime in the event of an incident to be much lower the actual time required for the response team to recover the application. Which of the following should be the NEXT course of action?

A. Invoke the disaster recovery plan during an incident
B. Reduce the recovery time by strengthening the response team
C. Prepare a cost-benefit analysis of alternatives available
D. Implement redundant infrastructure for the application