Question

Difficulty: MediumBusiness Impact Analysis and Business Continuity Management

A biotechnology research firm conducts a Business Impact Analysis (BIA) for its cloud-hosted genomic sequencing data pipeline. The BIA determines that to prevent severe compliance and financial penalties, the platform must not lose more than 15 minutes of newly ingested sequencing data in the event of an outage, while system recovery and service restoration must be completed within 6 hours. Which metric specifically defines the 15-minute maximum acceptable threshold for data loss?

  1. Recovery Point Objective (RPO)Answer
  2. B
    Recovery Time Objective (RTO)
  3. C
    Mean Time Between Failures (MTBF)
  4. D
    Corrective Control Baseline

Answer

The metric specifying the maximum acceptable period of data loss (15 minutes) is the Recovery Point Objective (RPO).
The Recovery Point Objective (RPO) specifies the maximum tolerable amount of data loss measured in time prior to an incident. A 15-minute threshold indicates that backups or replication mechanisms must occur frequently enough to ensure no more than 15 minutes of unrecoverable data.

Step-by-Step Solution

1
Analyze the scenario parameters
Identified two distinct operational constraints: a maximum data loss threshold of 15 minutes and a system outage duration recovery threshold of 6 hours.
Business Impact Analysis (BIA) separates data recovery timeframes from operational recovery timeframes.
2
Map the data loss duration constraint to the standard Business Continuity Management metric
The target duration (15 minutes of lost telemetry/data) aligns directly with the Recovery Point Objective (RPO).
RPO measures data loss tolerance backward from the point of disruption.

Key Concept

Recovery Point Objective (RPO) vs. Recovery Time Objective (RTO)
Rate this question