Which activity should establish the recovery priority of payroll versus a public marketing site?

1. Selecting the newest operating system
2. Scanning only for open ports
3. Business impact analysis
4. Randomly ordering server hostnames