Which of the following is MOST likely to contain ranked and ordered information on the likelihood and potential
impact of catastrophic events that may affect business processes and systems, while also highlighting the
residual risks that need to be managed after mitigating controls have been implemented?


A. An RTO report
B. A risk register
C. A business impact analysis
D. An asset value register
E. A disaster recovery plan