Identifying and evaluating potential threats to operations, Assessing the potential impacts of disruptions on business functions, Developing strategies and plans to maintain operations during disruptions, Establishing procedures for recovering IT systems and data.