a company is concerned about risks that might hinder its ability to conduct business. the company will analyze their critical processes to understand which elements need to be prioritized and maintained during a crisis. what concept requires this type of analysis?