A framework and method for use in determining appropriate information technology system disaster recovery and operational continuity solutions for an enterprise. In one embodiment the method includes identifying (504) business processes associated with achieving a defined mission of the enterprise. Assets of the information technology system are grouped (508) into one or more functional sub-system/data class groups and one or more of the business processes are selected. The functional sub-system/data class groups are mapped (524) to the selected business processes to establish a correspondence between each selected business process and one or more of the functional sub-system/data class groups. Thereafter, each functional sub-system/data class group corresponding with each selected business process is associated (602) with a solution class included in a three-dimensional disruption tolerance decision matrix.