A regional healthcare system is conducting a Business Impact Analysis (BIA) for its clinical Picture Archiving and Communication System (PACS). The operational team determines that the application must be fully restored and operational within 4 hours of an unplanned outage to avoid catastrophic disruption to surgical scheduling. Additionally, clinical governance rules mandate that the system must not lose more than 15 minutes of newly ingested radiology scan data during a disruption. Which of the following metric configurations correctly aligns with these BIA parameters?
- Recovery Time Objective (RTO) of 4 hours and Recovery Point Objective (RPO) of 15 minutesAnswer
- BRecovery Time Objective (RTO) of 15 minutes and Recovery Point Objective (RPO) of 4 hours
- CMean Time Between Failures (MTBF) of 4 hours and Mean Time to Repair (MTTR) of 15 minutes
- DCorrective Control Duration of 15 minutes and Preventive Control Duration of 4 hours
Answer
Recovery Time Objective (RTO) of 4 hours and Recovery Point Objective (RPO) of 15 minutes
In a Business Impact Analysis (BIA), Recovery Time Objective (RTO) represents the maximum allowable amount of time that a system or business process can be down before incurring unacceptable consequences (4 hours for PACS system recovery). Recovery Point Objective (RPO) dictates the maximum acceptable age of data that can be lost from memory/backup due to an event (15 minutes of missing radiology imaging data). Therefore, the correct metric configuration is RTO of 4 hours and RPO of 15 minutes.
Step-by-Step Solution
Key Concept
Distinction between Recovery Time Objective (RTO) and Recovery Point Objective (RPO) in Business Impact Analysis
Estimated Time:1m 15s