Which activity is not the responsibility of IT service continuity management?

A. Drawing up back-out scenarios

B. Analyzing risks

C. Testing back-out arrangements

D. Executing impact analyses of incidents related to the back-out facilities