Certified in Risk and Information Systems Control (CRISC) — Question 816

Which key performance indicator (KPI) BEST measures the effectiveness of an organization's disaster recovery program?

Answer options

• A. Number of service level agreement (SLA) violations.
• B. Percentage of critical systems recovered within the recovery time objective (RTO).
• C. Percentage of recovery issues identified during the exercise.
• D. Number of total systems recovered within the recovery point objective (RPO).

Correct answer: B

Explanation

The correct answer, B, focuses on the percentage of critical systems that are successfully recovered within the designated recovery time objective (RTO), which directly indicates the program's effectiveness. Option A measures SLA violations, which do not specifically reflect disaster recovery success. Option C assesses recovery issues, but does not provide a clear measure of recovery effectiveness, while option D looks at total systems recovered under RPO, which is less critical than focusing on critical systems and their timely recovery within RTO.