The Chief Information Officer (CIO) has established the requirement to limit data loss to within two hours of a disaster. Which of the following terms describes this requirement?

RTO (Recovery Time Objective) defines how quickly IT systems and services must be restored to operation after a disaster, not how much data loss is tolerable.

RPO specifies the point in time to which data must be recoverable after a disaster, meaning the organization cannot lose more data than what was created or changed within that RPO window. A two-hour RPO means backups or replication must occur at minimum every two hours to ensure no more than two hours of data is at risk. This is a business-defined requirement that directly governs data protection strategy and backup schedules.

MTTR (Mean Time To Repair) is an operational reliability metric measuring the average time needed to repair a failed component, and is unrelated to disaster recovery data loss thresholds.

MTBF (Mean Time Between Failures) measures the average operational time between system failures and is a reliability and availability metric, not a data loss or recovery objective.