A regional telemedicine network is defining business continuity metrics for its real-time video consultation platform. The business impact analysis (BIA) mandates that patient interaction records must not experience more than 15 minutes of data loss, and the platform must resume full operations within 4 hours of an unplanned outage. Which of the following statements accurately align these operational targets with business continuity metrics? (Select TWO)
- Establishing a Recovery Point Objective (RPO) of 15 minutes ensures that data loss does not exceed the maximum acceptable 15-minute timeframe.Answer
- BEstablishing a Recovery Time Objective (RTO) of 15 minutes defines the acceptable timeframe for restoring complete platform functionality.
- Establishing a Recovery Time Objective (RTO) of 4 hours targets the maximum acceptable duration of service downtime following a disruption.Answer
- DDeploying a secondary database cluster operates as a deterrent security control to minimize the platform recovery time.
Answer
The correct statements are that setting a Recovery Point Objective (RPO) of 15 minutes bounds maximum acceptable data loss, and setting a Recovery Time Objective (RTO) of 4 hours defines maximum allowable service downtime.
Recovery Point Objective (RPO) measures the maximum acceptable timeframe of unrecoverable data loss during an outage, matching the 15-minute consultation log target. Recovery Time Objective (RTO) measures the targeted duration required to restore operational capabilities, matching the 4-hour downtime limit.
Step-by-Step Solution
Key Concept
Distinguishing RTO and RPO in Business Impact Analysis