This is the point of the process where you begin to look at what your available options are based on your business user requirements and what you technically have at your disposal to properly meet your business continuity and disaster recovery requirements:

• Based on your business user requirements, what do you need?
• Develop a technical design that satisfies your business users' requirements.
• Ensure that information security is maintained as part of this design and that the organization's risk posture is not reduced by the design.