CRISC Certified in Risk and Information Systems ControlInformation Technology and SecurityMedium
A financial institution is evaluating its disaster recovery plan. During a recent test, it was discovered that the recovery time objective (RTO) for its core banking system was not met due to extensive data restoration procedures. Which of the following is the MOST appropriate immediate action for the institution to take?
- ARevise the recovery point objective (RPO) to allow for more data loss.
- BIncrease the frequency of data backups to reduce the amount of data loss.
- CImplement a more efficient data restoration technology or process.
- DConduct a comprehensive business impact analysis (BIA) for all systems.
Show answer & explanationAnswer & explanation
Correct answer: C. Implement a more efficient data restoration technology or process.
The core issue is failing to meet the RTO due to slow data restoration. Improving the restoration process directly addresses this problem. Increasing backup frequency (A) affects RPO, not RTO. Revising RPO (C) would lower the standard, not solve the RTO failure. Conducting a BIA (D) is a foundational activity but not an immediate action to address a failed RTO test.
Why the other options are wrong
- A. Revising the RPO would adjust the acceptable data loss, which is not the primary issue when RTO is not met due to restoration time.
- B. Increasing backup frequency is related to RPO (data loss), not RTO (time to recover).
- D. A BIA is a critical initial step for planning, but the question describes a post-test scenario requiring an immediate corrective action for a failed RTO.
Recovery Time Objective (RTO)
The maximum acceptable duration of time following a disaster or disruption during which a business process or system can be unavailable without causing unacceptable consequences.
- Focuses on the 'time' aspect of recovery.
- Determined by business impact analysis (BIA).
- A key metric for disaster recovery planning.
Memory trick: RTO is 'Ready To Operate' time.