When a shortfall of IT resources is identified, the FIRST course of action is to;

[References:, According to ISACA’s CGEIT Review Manual 2021, one of the key activities for ensuring effective IT resource management is to "perform a business impact analysis (BIA) to identify and prioritize critical IT resources."1, According to ISACA’s COBIT 2019 Framework, one of the governance objectives for managing IT resources is to "ensure that a BIA is performed to determine the required level of availability, continuity and security of IT services and data."2, According to ISACA’s Business Continuity Management guide, one of the steps for developing a business continuity plan is to "conduct a BIA to identify the critical business processes and IT resources that support them."3, , , , , ]