During a Business Impact Analysis (BIA) for a commercial bank's real-time fraud detection engine, the risk management team establishes two key operational constraints: transaction data loss must not exceed 15 minutes of activity, and the service must be fully operational within 2 hours following a disaster to avoid severe regulatory penalties. Which of the following metric assignments correctly aligns with these BIA findings?
- Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hoursCevap
- BRecovery Time Objective (RTO) of 15 minutes and Recovery Point Objective (RPO) of 2 hours
- CWork Recovery Time (WRT) of 15 minutes and Maximum Tolerable Downtime (MTD) of 2 hours
- DDeterrent control boundary of 15 minutes and Corrective control limit of 2 hours
Cevap
Recovery Point Objective (RPO) of 15 minutes and Recovery Time Objective (RTO) of 2 hours
The correct option accurately designates 15 minutes as the Recovery Point Objective (RPO)—the target time threshold for acceptable data loss—and 2 hours as the Recovery Time Objective (RTO)—the targeted window to restore operational capability.
Adım Adım Çözüm
Anahtar Kavram
Distinction between Recovery Point Objective (RPO) and Recovery Time Objective (RTO) in Business Impact Analysis