nerdexam
(ISC)2

CGRC · Question #155

The overall length of time an information system's components can be in the recovery phase before negatively impacting the organization's mission or mission/business functions. Response:

The correct answer is A. Recovery Time Objective (RTO). Recovery Time Objective (RTO) defines the maximum acceptable duration for restoring business processes or functions after an incident, before significant negative impact occurs.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The overall length of time an information system's components can be in the recovery phase before negatively impacting the organization's mission or mission/business functions. Response:

Options

  • ARecovery Time Objective (RTO)
  • BSystem of Records Notice (SRN)
  • CMaximum Tolerable Downtime (MTD)
  • DDisaster Recovery Plan (DRP)

How the community answered

(28 responses)
  • A
    89% (25)
  • B
    7% (2)
  • D
    4% (1)

Why each option

Recovery Time Objective (RTO) defines the maximum acceptable duration for restoring business processes or functions after an incident, before significant negative impact occurs.

ARecovery Time Objective (RTO)Correct

The Recovery Time Objective (RTO) specifies the maximum allowable amount of time that an information system, application, or business function can be unavailable following a disruption or disaster. It represents the target time within which a business process must be restored to avoid unacceptable consequences related to a break in business continuity.

BSystem of Records Notice (SRN)

A System of Records Notice (SRN) is a government publication describing systems that contain personal information, unrelated to recovery timing.

CMaximum Tolerable Downtime (MTD)

Maximum Tolerable Downtime (MTD) is the total time an organization can tolerate an outage, which encompasses the RTO but is a broader concept for the entire mission or process, not just the recovery phase of components.

DDisaster Recovery Plan (DRP)

A Disaster Recovery Plan (DRP) is the document outlining the procedures for recovery, not the specific metric for recovery time.

Concept tested: Recovery Time Objective (RTO) definition

Source: https://csrc.nist.gov/glossary/term/recovery-time-objective

Topics

#Recovery Time Objective (RTO)#Business Continuity#Disaster Recovery#Risk Management

Community Discussion

No community discussion yet for this question.

Full CGRC Practice