An enterprise security risk manager is leading a Business Impact Analysis (BIA) for a newly integrated real-time interbank transaction settlement platform. To configure disaster recovery targets and automated failover policies, the manager must establish baseline metrics that explicitly bound maximum tolerable transactional data loss and the overall maximum timeframe the platform can remain offline before experiencing catastrophic regulatory penalties. Which of the following parameters must be established to satisfy these specific measurement requirements? (Select TWO.)
- Recovery Point Objective (RPO) to establish the maximum acceptable age of unrecovered data resulting from an outage.Answer
- Maximum Tolerable Downtime (MTD) to define the total threshold of operational outage time the business process can sustain before suffering non-recoverable damage.Answer
- CMean Time Between Failures (MTBF) to determine the targeted operational restoration window for primary platform services following a failure.
- DWork Recovery Time (WRT) to quantify the maximum allowable duration of missing database transaction records permitted prior to backup restoration.
Answer
The parameters that must be established are the Recovery Point Objective (RPO) to bound acceptable data loss timeframe, and the Maximum Tolerable Downtime (MTD) to establish the maximum allowable system outage duration.
The scenario requires defining metrics for two distinct thresholds: maximum tolerable transactional data loss and total allowable outage duration. Recovery Point Objective (RPO) specifies the maximum acceptable data loss measured in time, defining how recent restored backups must be. Maximum Tolerable Downtime (MTD) sets the absolute longest duration a business process can remain offline before encountering unacceptable consequences.
Step-by-Step Solution
Key Concept
Business Impact Analysis (BIA) metrics: RPO defines maximum acceptable data loss timeframe, whereas MTD sets the maximum overall tolerable outage duration.