Question

Difficulty: EasyBusiness Impact Analysis and Business Continuity Management

During a Business Impact Analysis (BIA), an enterprise security team defines a target timeframe of two hours to fully restore a critical application and its services after an unexpected server failure. Which of the following metrics best describes this targeted restoration timeframe?

  1. Recovery Time Objective (RTO)Answer
  2. B
    Recovery Point Objective (RPO)
  3. C
    Mean Time Between Failures (MTBF)
  4. D
    Mean Time to Repair (MTTR)

Answer

Recovery Time Objective (RTO)
The term Recovery Time Objective (RTO) represents the targeted duration of time and service level within which a business process must be restored after a disruption in order to avoid unacceptable consequences associated with a break in business continuity.

Step-by-Step Solution

1
Identify the key operational requirement described in the scenario.
The scenario requires establishing a target maximum timeframe (two hours) for restoring application availability following an outage.
Determining whether the constraint relates to service recovery time versus data loss helps select the appropriate BIA metric.
2
Map the requirement to standard Business Impact Analysis (BIA) definitions.
The targeted duration to bring systems back online corresponds to the Recovery Time Objective (RTO).
RTO focuses on service restoration timing, whereas RPO focuses on acceptable data loss timing.

Key Concept

Recovery Time Objective (RTO) vs. Recovery Point Objective (RPO)
Rate this question