Certified Information Systems Auditor (CISA) — Question 1224

IT disaster recovery time objectives (RTOs) should be based on the:

Answer options

• A. mean time to restore (MTTR).
• B. maximum tolerable downtime (MTD).
• C. system interdependencies.
• D. maximum tolerable loss of data.

Correct answer: B

Explanation

The correct answer is B, as maximum tolerable downtime (MTD) directly influences how long a system can be down before it significantly impacts the organization. Other options, while relevant to recovery strategies, do not specifically define the acceptable timeframe for downtime in disaster recovery planning.