Recovery Time Objective

Within ISO 22301, the RTO is defined as: “period of time following an incident within which; product or service must be resumed, or activity must be resumed, or Assets must be recovered”

The RTO may have to be defined for an activity as part of a business impact analysis. The specified time must be greater than, or equal to, the time the first resource is recovered, but it must be smaller than the MTPD.

RTO's are set up against each individual activity, to identify how long it should take to have the activity back up and running. This must be lower than the MAO* * (Maximum Acceptable Outage) and greater or equal to the RRT (Resource Recovery Time). Any linked activities will be displayed at the bottom showing the RTO's associated with them. These can be used to address how long each linked activity's RTO is as these can affect each other.