Which of the following is most appropriate with regard to an organization's Business Continuity Planning (BCP) framework?
A. It is not necessary to have a BCP framework, and in the event of a crisis, instant measures can be taken as per the need of the hour.
B. An organization should implement a BCP framework without doing a cost-benefit analysis.
C. The organization should carry out a cost-benefit analysis with due diligence and then implement a BCP framework that meets the business objectives of all concerned.
D. None of the above
