Which of the following documents should link to the recovery point objectives and recovery time objectives on critical services?

Question

Options

• ADisaster recovery plan
• BBusiness impact analysis
• CPlaybook
• DBackup plan

• B
  91% (50)
• C
  4% (2)
• D
  5% (3)

Explanation

Business Impact Analysis (BIA) and RPO/RTO

A Business Impact Analysis (BIA) is the document that identifies and links Recovery Point Objectives (RPO) and Recovery Time Objectives (RTO) to critical services, because its core purpose is to assess the potential impact of disruptions and define how much downtime or data loss an organization can tolerate for each critical function. The BIA is the foundational document that establishes these thresholds before any recovery planning begins.

• A (Disaster Recovery Plan): Wrong because the DRP uses the RPO/RTO values defined in the BIA to build recovery procedures - it doesn't define or link them.
• C (Playbook): Wrong because a playbook contains step-by-step operational procedures for responding to specific incidents, not business impact metrics.
• D (Backup Plan): Wrong because a backup plan focuses on data backup schedules and methods, which may support RPO goals but doesn't formally define or link them to critical services.

Memory Tip: Think BIA = Business "I Assess" - the BIA is where you assess what matters most to the business and quantify it with RPO and RTO values. Everything else (DRP, playbooks, backup plans) flows from the BIA.

No community discussion yet for this question.