In previous posts, we stepped through the process of understanding the business, the threats it faces related to business continuity, and how prepared it is to prevent, detect, or respond to events.