48) According to IIA guidance, which of the following is the correct order to conduct a business impact analysis (BIA) for the potential loss of an organization's network services? 1. identify resources and partners to provide required recovery services. 2. Identity the business process supporting the network functionality. 3. Obtain approval of the BIA from the operating managers relative to their areas of responsibility. 4. Identify the business impact if the network services cannot be performed. a) 1, 2, 3, 4 b) 2. 1, 4, 3 c) 2, 4, 1, 3 d) 4.2. 1.3