What are each type of risk - response method as it relates to 'specific' instances where business continuity and / or disaster recovery would come into play.