Which of the following should be of MOST concern to an IS auditor reviewing the BCP? 
A、The disaster levels are based on scopes of damaged functions, but not on duration. 
B、The difference between low-level disaster and software incidents is not clear. 
C、The overall BCP is documented, but detailed recovery steps are not specified. 
D、The responsibility for declaring a disaster is not identified.