A security administrator is reviewing the company’s continuity plan. The plan specifies an RTO of
six hours and RPO of two days. Which of the following is the plan describing?
A.
Systems should be restored within six hours and no later than two days after the incident.
B.
Systems should be restored within two days and should remain operational for at least six
hours.
C.
Systems should be restored within six hours with a minimum of two days worth of data.
D.
Systems should be restored within two days with a minimum of six hours worth of data.
Explanation:
I think A is closer, but neither fit the definition of RPO well which is related to how much data you’re willing to lose. RPO of 2 days means I should be able to restore to a point no older than 2 days ago meaning I could lose up to 2 days worth of data.