Which of the following BEST indicates that an organization's disaster recovery plan (DRP) will mitigate the risk of the organization failing to recover from a major service disruption?

The RPO specifies the maximum acceptable amount of data loss measured in time, defining a critical success criterion for data recovery. By clearly establishing this objective, the DRP is designed with a measurable target that directly addresses the risk of losing too much data and failing to restore to an acceptable state after a disruption.

An experienced and certified disaster recovery team is crucial for execution, but their presence alone doesn't guarantee the plan's effectiveness or its ability to mitigate risk.

A comprehensive list of critical applications is a necessary input for DRP development but doesn't by itself indicate the plan's effectiveness in mitigating recovery failure.

A record of quarterly disaster recovery tests demonstrates the plan's current state of readiness but a defined RPO is a foundational design element that indicates the plan's *intent and capability* to mitigate data loss risk through its design.