An IT security team is defining operational metric parameters during a Business Impact Analysis (BIA) for an enterprise enterprise resource planning (ERP) environment. Which TWO of the following statements correctly distinguish Recovery Time Objective (RTO) from Recovery Point Objective (RPO)?
- RTO specifies the maximum acceptable duration of service downtime following a disruptive incident.Cevap
- RPO specifies the maximum allowable age of unrecovered data or data loss measured in time.Cevap
- CRTO defines the allowable volume of lost database transactions, while RPO defines the timeframe required to repair hardware components.
- DRPO serves as a deterrent security control, while RTO functions exclusively as a preventive physical control.
Cevap
Recovery Time Objective (RTO) defines the maximum acceptable downtime duration before systems are restored, while Recovery Point Objective (RPO) defines the maximum allowable timeframe of lost data.
The correct statements accurately define Recovery Time Objective (RTO) as the targeted duration of allowable system downtime and Recovery Point Objective (RPO) as the maximum tolerable age of data lost due to a disruptive event. Both parameters are foundational metrics established during a Business Impact Analysis (BIA) to shape continuity and backup strategies.
Adım Adım Çözüm
Anahtar Kavram
Distinguishing RTO and RPO in Business Impact Analysis
Tahmini Süre:1m 0s