CompTIA Security+ Exam Prep

Answer: D - Damage and Impact Assessment is part of the Recovery and Resumption phase of the Business Continuity Plan.

After the initial crisis response has taken place, the Recovery and Resumption phase is designed to get the organization back to its normal state. The first step in this process is to implement a damage and impact assessment so that plans can be made accordingly.