Following an unannounced infrastructure outage, a financial services company executes its … — CompTIA Security+

Following an unannounced infrastructure outage, a financial services company executes its business continuity plan for a core payment gateway. The organization's Business Impact Analysis (BIA) specifies a Maximum Tolerable Downtime (MTD) of $6\text{ hours}$ and a Recovery Point Objective (RPO) of $15\text{ minutes}$ . Technical recovery teams successfully restore the primary database from an automated snapshot generated $10\text{ minutes}$ prior to the incident, completing baseline platform recovery in $2.5\text{ hours}$ . However, post-restoration data integrity verification, transaction reconciliation, and security testing require an additional $4\text{ hours}$ before operational sign-off is granted and production traffic is resumed. Which of the following conclusions best evaluates the organization's business continuity performance against its established metrics?

The organization satisfied its RPO requirement but failed to meet its MTD objectives because total operational recovery, combining system restoration and Work Recovery Time (WRT), exceeded the allowable limit.Answer
B
The organization successfully satisfied all business continuity requirements because the technical recovery time of $2.5\text{ hours}$ remained well beneath the $6\text{ hour}$ threshold.
C
The organization breached its RPO target because the complete duration to return the service to an operational state reached $6.5\text{ hours}$ .
D
The organization should implement detective compensating controls to reduce verification duration, as post-restoration transaction reconciliation is an incident response containment activity rather than a continuity metric component.

Answer

The organization satisfied its RPO requirement but failed to meet its MTD objectives because total operational recovery, combining system restoration and Work Recovery Time (WRT), exceeded the allowable limit.

The solution correctly evaluates both parameters separately. RPO is satisfied because the data loss duration (

10\text{ minutes}

) was less than the allowable target (

15\text{ minutes}

). However, the total operational downtime comprises both the technical recovery (

2.5\text{ hours}

) and the work recovery/reconciliation phase (

4\text{ hours}

), totaling

6.5\text{ hours}

. Since

6.5\text{ hours}

exceeds the Maximum Tolerable Downtime (

6\text{ hours}

), the overall continuity performance breached MTD limits.

Step-by-Step Solution

Evaluate data loss against Recovery Point Objective (RPO)

The database was restored from a snapshot taken

10\text{ minutes}

before outage. Since

10\text{ minutes} \le 15\text{ minutes}

, the RPO target was achieved.

RPO defines the maximum tolerable data loss measured in duration before the disaster occurred.

Calculate total downtime duration (RTO + WRT)

Technical system restoration (RTO) took

2.5\text{ hours}

. Work Recovery Time (WRT) for reconciliation took

4\text{ hours}

. Total recovery time

= 2.5\text{ hours} + 4\text{ hours} = 6.5\text{ hours}

Maximum Tolerable Downtime (MTD) encompasses both system restoration and the operational effort required to verify data and return the service to business operation.

Compare total recovery duration against Maximum Tolerable Downtime (MTD)

6.5\text{ hours} > 6\text{ hours}

(MTD). The organization breached its MTD threshold.

Exceeding MTD means business operations experienced impact beyond acceptable tolerances, even though initial technical restoration appeared successful.

Key Concept

Business Continuity Metrics (RPO, RTO, WRT, and MTD)

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics

More questions from this topic