Certified Chief Information Security Officer (CCISO) — Question 13

As the Business Continuity Coordinator of a financial services organization, you are responsible for ensuring assets are recovered timely in the event of a disaster.
Which is the BEST Disaster Recovery performance indicator to validate that you are prepared for a disaster?

Answer options

• A. Recovery Point Objective (RPO)
• B. Disaster Recovery Plan
• C. Recovery Time Objective (RTO)
• D. Business Continuity Plan

Correct answer: C

Explanation

The Recovery Time Objective (RTO) is the critical metric that determines the maximum allowable downtime after a disaster, ensuring that services are restored within a specified timeframe. While the Recovery Point Objective (RPO) focuses on data loss, the Disaster Recovery Plan and Business Continuity Plan are overarching documents that guide recovery but do not quantify time sensitivity like RTO does.