An organization has just completed their annual risk assessment. Regarding the business continuity plan, what should an IS auditor recommend as the next step for the organization? 
A、Review and evaluate the business continuity plan for adequacy 
B、Perform a full simulation of the business continuity plan 
C、Train and educate employees regarding the business continuity plan 
D、Notify critical contacts in the business continuity plan