Certified Information Systems Auditor (CISA) — Question 1350

Which of the following is MOST important to consider when defining disaster recovery strategies?

Answer options

• A. Mean time to restore (MTTR)
• B. Maximum time between failures (MTBF)
• C. Maximum tolerable downtime (MTD)
• D. Mean time to acknowledge (MTTA)

Correct answer: C

Explanation

The correct answer is C, Maximum tolerable downtime (MTD), because it determines the longest acceptable duration that systems can be unavailable after a disaster. Options A, B, and D, while important metrics, do not directly address the critical threshold for downtime that must be maintained to ensure business continuity.