CRISC · Question #589
Which of the following outcomes of disaster recovery planning is MOST important to enable the initiation of necessary actions during a disaster?
The correct answer is B. Recovery time and maximum acceptable data loss thresholds. For disaster recovery planning, defining Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) is paramount to enable the initiation of necessary actions during a disaster.
Question
Which of the following outcomes of disaster recovery planning is MOST important to enable the initiation of necessary actions during a disaster?
Options
- ADefinition of disaster recovery plan (DRP) scope and key stakeholders
- BRecovery time and maximum acceptable data loss thresholds
- CA checklist including equipment, location of data backups, and backup sites
- DA list of business areas and critical functions subject to risk analysis
How the community answered
(20 responses)- A5% (1)
- B80% (16)
- C10% (2)
- D5% (1)
Why each option
For disaster recovery planning, defining Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) is paramount to enable the initiation of necessary actions during a disaster.
Definition of DRP scope and key stakeholders is an initial planning step but doesn't provide the actionable metrics needed to initiate and guide recovery efforts.
Recovery Time Objective (RTO) and Recovery Point Objective (RPO) are critical thresholds that directly enable the initiation of necessary actions during a disaster. RTO defines the maximum acceptable downtime, dictating how quickly systems must be restored, while RPO defines the maximum acceptable data loss, guiding backup and recovery strategies. These metrics provide clear targets for the incident response and recovery teams.
A checklist including equipment, location of data backups, and backup sites is a valuable component of the DRP, but the RTO and RPO are the overarching objectives that drive the creation and prioritization of such checklists.
A list of business areas and critical functions subject to risk analysis is part of business impact analysis (BIA), which informs RTO/RPO, but the RTO/RPO themselves are the direct triggers for action.
Concept tested: Disaster recovery objectives (RTO, RPO)
Source: https://learn.microsoft.com/en-us/azure/architecture/resiliency/recovery-time-objective
Topics
Community Discussion
No community discussion yet for this question.