Which of the following BEST enables a risk practitioner to identify the consequences of losing critical resources due to a disaster?

Risk management action plans detail steps to mitigate risks but do not primarily identify the *consequences* of a disaster; rather, they address *how to handle* identified risks.

A Business Impact Analysis (BIA) systematically identifies and evaluates the potential effects of an interruption to critical business functions and processes. This analysis helps determine the financial and operational consequences of resource loss, such as revenue loss, increased expenses, and damaged reputation, establishing recovery time and recovery point objectives.

A what-if technique is a general problem-solving approach for exploring hypothetical scenarios, but it lacks the structured and systematic focus on business resource loss consequences that a BIA provides.

Tabletop exercise results evaluate the effectiveness of existing plans and identify gaps, but they are based on *simulations* and do not primarily establish the initial comprehensive identification and quantification of all potential consequences of resource loss like a BIA does.