Q.4271 John Henderson, FRM, is the newly appointed chief officer in charge of information systems and security at Capital Bank. Upon scrutinizing the bank’s cyber-security strategy, he has found that the bank lacks a well thought out business continuity plan that can be adopted in the event of an exceptional event or crisis. With the help of other executives, he proceeds to conduct a business impact assessment and singles out the most critical activities, resources, and services that would be in need of rapid restoration in the event of a cyber-attack. Which of the following activities would be most critical before finalizing and implementing the newly developed plan?