Question

Difficulty: EasyBusiness Impact Analysis and Business Continuity Management

An organization's security team is conducting a Business Impact Analysis (BIA) for a cloud-hosted customer portal. The analysis indicates that the organization can tolerate a maximum of two hours of lost data during an unpredicted outage before experiencing critical business impact. Which of the following metrics defines this maximum acceptable data loss timeframe?

  1. Recovery Point Objective (RPO)Answer
  2. B
    Recovery Time Objective (RTO)
  3. C
    Maximum Tolerable Downtime (MTD)
  4. D
    Mean Time Between Failures (MTBF)

Answer

Recovery Point Objective (RPO)
Recovery Point Objective (RPO) directly measures the maximum amount of data loss an organization can tolerate expressed as a time duration prior to an outage. Specifying a maximum data loss threshold of two hours establishes an RPO of two hours.

Step-by-Step Solution

1
Identify the primary constraint described in the business continuity scenario.
The scenario focuses on the maximum tolerable data loss duration (two hours).
Differentiating between time-to-restore systems and acceptable data loss is necessary to choose the correct metric.
2
Match the constraint to standard Business Impact Analysis (BIA) metrics.
The metric measuring maximum acceptable data loss in terms of time is the Recovery Point Objective (RPO).
RPO dictates backup frequency and data replication strategies.

Key Concept

Recovery Point Objective (RPO)
Estimated Time:45s
Rate this question