Examkin

Question

Difficulty: MediumBusiness Impact Analysis and Business Continuity Management

A pharmaceutical manufacturing enterprise conducts a Business Impact Analysis (BIA) for its automated batch control system. The BIA determines that losing operational data generated within the last 30 minutes would cause severe regulatory non-compliance, whereas the application itself can remain offline for up to 8 hours before batch delivery schedules suffer unacceptable financial impacts. Which of the following sets of metrics accurately establishes the recovery criteria for this system?

  1. Recovery Point Objective (RPO) of 30 minutes and Recovery Time Objective (RTO) of 8 hoursAnswer
  2. B
    Recovery Time Objective (RTO) of 30 minutes and Recovery Point Objective (RPO) of 8 hours
  3. C
    Mean Time Between Failures (MTBF) of 30 minutes and Recovery Time Objective (RTO) of 8 hours
  4. D
    Recovery Point Objective (RPO) of 30 minutes and Deterrent Control Duration of 8 hours

Answer

The system requires a Recovery Point Objective (RPO) of 30 minutes and a Recovery Time Objective (RTO) of 8 hours.
The correct response accurately pairs Recovery Point Objective (RPO) with the 30-minute maximum data loss threshold and Recovery Time Objective (RTO) with the 8-hour maximum system outage window.

Step-by-Step Solution

1
Identify the data loss threshold in the scenario
Maximum acceptable data loss is 30 minutes
Recovery Point Objective (RPO) measures the maximum acceptable timeframe of data loss measured in time back from the point of failure.
2
Identify the maximum allowable service downtime threshold in the scenario
Maximum acceptable downtime is 8 hours
Recovery Time Objective (RTO) specifies the maximum acceptable duration that a business process or IT system can remain unavailable after an outage.
3
Match identified values to standard Business Continuity Management metrics
RPO = 30 minutes, RTO = 8 hours
Combining RPO for data loss tolerance and RTO for service restoration timeframe correctly satisfies the scenario parameters.

Key Concept

Distinguishing Recovery Point Objective (RPO) from Recovery Time Objective (RTO) in Business Impact Analysis
Rate this question

Topics

Business Impact Analysis and Business Continuity Management

More questions from this topic