An enterprise online payment gateway has established a Maximum Tolerable Downtime (MTD) of hours and a Recovery Point Objective (RPO) of minutes for its transactional core. During a disaster recovery test following a simulated primary facility outage, engineers observe that data replication occurs at -minute intervals, secondary virtual infrastructure deployment requires hours, and database state restoration and integrity verification require an additional hours before operations can resume. Which of the following statements accurately evaluates the organization's current business continuity posture?
- The calculated Recovery Time Objective (RTO) of hours exceeds the Maximum Tolerable Downtime (MTD), creating unacceptable operational risk.Cevap
- BThe -minute data replication window violates the Maximum Tolerable Downtime (MTD) requirement by allowing excessive downtime.
- CThe deployment phase of hours fails to satisfy the Recovery Point Objective (RPO), resulting in severe data loss.
- DUtilizing a warm site recovery model operates as a deterrent control rather than a corrective strategy, contradicting BIA mandates.
Cevap
The calculated Recovery Time Objective (RTO) of hours exceeds the Maximum Tolerable Downtime (MTD), creating unacceptable operational risk.
The scenario describes infrastructure deployment ( hours) and system restoration/verification ( hours), yielding a total recovery duration (RTO) of hours. Because MTD is the absolute limit of acceptable outage time ( hours), an RTO of hours violates MTD criteria.
Adım Adım Çözüm
Anahtar Kavram
Alignment of Recovery Time Objective (RTO) and Maximum Tolerable Downtime (MTD) in Business Impact Analysis