CompTIA Security+ (SY0-601) — Question 795

Which of the following explains why RTO is included in a BIA?

Answer options

• A. It identifies the amount of allowable downtime for an application or system.
• B. It prioritizes risks so the organization can allocate resources appropriately.
• C. It monetizes the loss of an asset and determines a break-even point for risk mitigation.
• D. It informs the backup approach so that the organization can recover data to a known time.

Correct answer: A

Explanation

The correct answer is A because RTO, or Recovery Time Objective, defines the maximum acceptable downtime for a system, making it crucial in understanding business continuity needs. Options B, C, and D, while related to risk management and recovery, do not specifically address the concept of allowable downtime that RTO represents.