3.2.1. Prioritize handling the incident based on the business impact