A business impact analysis (BIA) has documented the duration of maximum allowable outage for each of an organization's applications. Which of the following MUST be aligned with the maximum allowable…

Mean Time To Restore (MTTR) is an operational metric reflecting the average time taken to repair a failed system, which ideally should be less than the RTO, but it is not the target objective itself.

The Recovery Time Objective (RTO) defines the maximum acceptable downtime for a system or business process after an incident to avoid unacceptable consequences. This directly aligns with the Maximum Allowable Outage (MAO), which is the absolute longest period a business function can be inoperable before suffering severe damage.

Recovery Point Objective (RPO) defines the maximum tolerable period in which data might be lost from an IT service due to a major incident, focusing on data loss rather than downtime duration.

Mean Time To Detect (MTTD) measures the average time it takes to identify a security incident or system failure, which is distinct from the acceptable duration of an outage.