In a business impact analysis, what is the purpose of recovery time objectives?

• A. To define the maximum tolerable downtime for a process
• B. To measure data throughput
• C. To determine vendor performance
• D. To set budget

Answer: (A)

The main concept here is the maximum downtime a process can tolerate after a disruption. The recovery time objective defines that limit, specifying how quickly a process must be restored to avoid unacceptable impacts on operations, customers, or revenue. This time frame guides recovery planning, determines which systems to prioritize, and shapes the choice of recovery strategies and resources. It’s not about data throughput, which relates to data transfer rates; it doesn’t measure vendor performance; and it doesn’t set the budget—budget decisions come from broader financial planning. (Note that RPO, the acceptable data loss, works alongside the RTO to shape a complete disaster recovery plan.)