Which of the following should IT service continuity strategy be based on? 1. Design of the service metrics 2. Business continuity strategy 3. Business impact analysis (BIA) 4. Risk assessment

This option includes the design of service metrics (item 1), which is not a basis for IT service continuity strategy, and omits the BIA (item 3), which is a required input.

This option includes service metrics design (item 1), which is unrelated to continuity strategy foundations, and excludes risk assessment (item 4), which is a mandatory input.

The business continuity strategy provides the overarching direction that IT service continuity must support and align with. The BIA identifies critical business processes and their recovery requirements, while the risk assessment evaluates threats and their likelihood, both of which are essential inputs for designing an IT service continuity strategy that reflects real business priorities.

This option includes service metrics design (item 1) and omits business continuity strategy (item 2), but IT service continuity strategy must directly derive from and support the broader business continuity strategy.