Recovery Time Objective

Within ISO 22301, the RTO is defined as: “period of time following an incident within which; product or service must be resumed, or activity must be resumed, or Assets must be recovered”

The RTO may have to be defined for an activity as part of a business impact analysis. The specified time must be greater than, or equal to, the time the first resource is recovered, but it must be smaller than the MTPD.

Recovery Point Objective (RPO)

Recovery Point Objective (RPO) - This indicates that the resource contains information and any activity using this resource needs to enter the RPO.
If any assets have been set up as ‘RPO required’ then additional information will display within the asset BC details section within Organisation> Assets. This allows the data recovery requirements to be entered. Enter the amount that could be lost from this system but still allow the activity to operate.