analysis of an information system that rates the likelihood of a security incident occurring and its cost is included in a(n) group of answer choices business continuity plan. aup. risk assessment. business impact analysis. security policy.