CompTIA Security+ Exam Prep

Answer: B - The first item that should be decided when creating a business continuity plan is which portions of the business are essential and need to remain active during a disaster. Without this knowledge, other decisions of the business continuity plan cannot be made effectively.

When creating a business continuity plan, it is not possible to keep every aspect of the business going during a disaster, as it is cost prohibitive. Therefore, the first item that needs to be discussed is which business aspects are “mission-critical” and necessary to keep the business afloat while other aspects are still struggling to recover.