To write backup and recovery procedures, you need to review the IT systems, hardware, software, and communications infrastructure that supports business operations and functions, and you need to define how to maximize availability. This alignment of IT systems and components must be based on business operations, functions, and prioritizations. This prioritization is usually the result of a risk assessment and how those risks, threats, and vulnerabilities impact business operations and functions. What is the proper sequence of development and implementation for the following plans