18. An organization wants to establish a disaster recovery plan for critical applications that are hosted on premises. Which of the following is the first step to prepare for supporting this new requirement?

Answer: B

Explanation:

Establish prioritization of continuity from data and business owners.

Prioritizing continuity from data and business owners is the essential first step in preparing a disaster recovery plan. This process involves identifying which applications and data are critical to the organization’s operations, ensuring that recovery efforts are focused where they are needed most.

A) Choose a vendor to utilize for the disaster recovery location.

While selecting a vendor is an important component of disaster recovery planning, it is not the first step. Choosing a vendor should follow the identification of critical applications and data to ensure that the selected vendor can adequately support the organization's specific needs.

B) Establish prioritization of continuity from data and business owners.

This option is the correct first step as it involves engaging with business owners to understand the criticality of various applications and data sets. By establishing prioritization, the organization can focus its recovery efforts effectively and allocate resources accordingly.

C) Negotiate vendor agreements to support disaster recovery capabilities.

Negotiating with vendors is a crucial task in the disaster recovery process, but it should occur after the organization has determined which applications and data require the greatest protection. Without understanding priorities, any agreements made may not align with actual recovery needs.

D) Advise the leadership team that a geographical area for recovery must be defined.

Defining a geographical area for recovery is a relevant step in the disaster recovery planning process; however, it should come after identifying and prioritizing the applications and data that the recovery plan will focus on. Without prioritization, selecting a recovery location may not effectively address the organization's most critical needs.

Conclusion

Establishing prioritization of continuity from data and business owners is foundational for an effective disaster recovery plan. This step ensures that recovery efforts align with the organization's critical operational needs, while the other options, although important, are secondary and depend on this initial assessment. Therefore, prioritization is essential for a successful disaster recovery strategy.