Problem: You have just presented at a conference on the importance of the business continuity plan (BCP). One of the conference members approached you and asked why his organization should conduct risk mitigation as part of the BCP. Explain your response, and defend your answer