Which of the following should IT service continuity strategy be based on? 1. Design of the service metrics 2. Business continuity strategy 3. Business impact analysis (BIA) 4. Risk assessment

This option incorrectly includes item 1 (design of service metrics), which is not a foundational input to service continuity strategy, and omits item 3 (BIA), which is essential for identifying recovery requirements.

This option incorrectly includes item 1 (design of service metrics), which has no role in shaping a service continuity strategy, making the combination invalid.

The business continuity strategy sets the overarching direction that IT service continuity must support, ensuring IT recovery objectives align with business priorities. The BIA identifies which business functions are critical and defines recovery time and point objectives, while the risk assessment identifies threats and their likelihood of disrupting services. Together, these three inputs provide the necessary business-driven foundation for an IT service continuity strategy.

This option incorrectly includes item 1 (design of service metrics) and omits item 2 (business continuity strategy), which is the primary driver that IT service continuity must align with.