should select a critical business function which it considers that if emergency incidents happen, it will disrupt and significantly affect customers, business operation, financial status or reputation of