An enterprise recently experienced a major breach that was escalated effectively. However, the recovery took far longer than expected, resulting in significant financial loss. Which of the following i

KPIs not being monitored would affect overall performance tracking, but not directly explain a prolonged recovery period in an actual incident.

RPO defines the maximum tolerable data loss, impacting data recovery strategies, but a long recovery time relates more directly to the process and resources defined in a BCP and DRP.

A DRP not routinely updated would certainly contribute to a long recovery, but the BCP encompasses the broader organizational response and recovery of critical business functions, which is more directly tied to overall "recovery took far longer than expected" leading to "significant financial loss." An updated DRP is a component of an effective BCP; an untested BCP implies the DRP, even if updated, might not work in practice.

The business continuity plan (BCP) not being recently tested is the most likely root cause because even if a DRP exists, an untested BCP means that the overall organizational readiness to maintain essential business functions and recover operations in a timely manner was unverified. Regular BCP testing identifies practical challenges, resource gaps, and procedural flaws that prolong actual recovery efforts and increase financial losses.