Difference between revisions of "Recovery Time Objective (RTO)"

From BCMpedia. A Wiki Glossary for Business Continuity Management (BCM) and Disaster Recovery (DR).
Jump to navigation Jump to search
 
(25 intermediate revisions by one other user not shown)
Line 1: Line 1:
 
{| style="margin-left: 0px; text-align: left; font-style: none; width:100%; font-weight: none; background: #F0F0F0; border:1px"
 
{| style="margin-left: 0px; text-align: left; font-style: none; width:100%; font-weight: none; background: #F0F0F0; border:1px"
 
|-
 
|-
|'''1.''' Recovery Time Objective (RTO) refers to the maximum acceptable length of time that can elapse before the lack of a [[Business_Function|business function]] severely [[Impact|impacts]] the [[Organization|organization]]. This is the maximum agreed time for the resumption of the [[Critical_Business_Functions_(CBF)|critical business functions]].  
+
|{{Template:BL-BCM-5Banner}}'''1.''' Recovery Time Objective (RTO) refers to the maximum acceptable length of time that can elapse before the lack of a [[Business_Function|business function]] severely [[Impact|impacts]] the [[Organization|organization]]. This is the maximum agreed time for the resumption of the [[Critical_Business_Functions_(CBF)|critical business functions]].  
The RTO is comprised of the following components: Starting from the point of disaster, the time before a [[Disaster|disaster]] is declared, the time to perform tasks (as documented in the [[Business_Continuity_Plan_(BC_Plan)|BC]] or [[Disaster_Recovery_Plan_(DR_Plan)|DR plan]]) to the point of business resumption whereby the data which was lost, up to the point of disaster, is restored.
 
Related Terms: [[Recovery_Objectives_-_Category|Recovery Objectives]], [[Recovery_Point_Objective_(RPO)|Recovery Point Objective (RPO)]]
 
  
[[File:Dr Goh Moh Heng WordPress Blog Compress.jpg|thumb|right|300px|Dr Goh Moh Heng WordPress Blog Compress.jpg]]
+
The RTO is comprised of the following components: Starting from the point of disaster, the time before a [[Disaster|disaster]] is declared, the time to perform tasks (as documented in the [[Business_Continuity_Plan_(BC_Plan)|BC]] or [[Disaster_Recovery_Plan_(DR_Plan)|DR plan]]) to the point of business resumption whereby the data which was lost, up to the point of disaster, is restored.  ''See complete diagram of these three concepts shown below''.
  
[[File:3D BCM Series BIA in the context of BCM books.jpg|thumb|left|140px|Conducting Your Impact Analysis For Business Continuity Planning]]
+
'''Related Terms''': [[Recovery_Objectives_-_Category|Recovery Objectives]], [[Recovery_Point_Objective_(RPO)|Recovery Point Objective (RPO)]]
 +
<br><br>
 +
{{Template:BCM Course}}{{BcmBoK 3 CL 1B}}<br/> <br/> {{BcmBoK 3 CL 1C}}<br/> <br/> {{BcmBoK 3 CL 1D}}<br/> <br/> <br/>
  
{{BcmBoK 3 CL 1B}}<br/> <br/> {{BcmBoK 3 CL 1C}}<br/> <br/> {{BcmBoK 3 CL 1D}}<br/> <br/> <br/> '''''Courses'''''
+
{{BLCoursesBanner}}
 
 
*[https://www.bcm-institute.org/courses/business-continuity-management-courses-2/bcm-competency-courses/competency-level-300/bcm-310-assessing-risk-and-business-impact-requirements/ Attend: Classroom: Business Impact Analysis Courses]
 
*[https://www.bcm-institute.org/courses/business-continuity-management-courses-2/bcm-competency-courses/competency-level-300/bcm-320-developing-business-continuity-strategies-and-plans/ Attend: Classroom: Competency-based Business Impact Analysis Courses]
 
*[https://www.bcm-institute.org/courses/business-continuity-management-courses-2/business-continuity-management-e-learning-courses/business-impact-analysis-e-learning/ Attend: E-Learning: Business Impact Analysis module]
 
{{WCC Vertical}}
 
 
{{Bcm Institute Source}}
 
{{Bcm Institute Source}}
 
 
|}
 
|}
  
Line 34: Line 28:
  
 
{{NCEMA 7000 Source}}
 
{{NCEMA 7000 Source}}
 
+
{{Template:BookPSBIA}}
 
'''4.''' Target time set for resumption of product, service or [[Activity|activity]] delivery after an [[Incident|incident]].
 
'''4.''' Target time set for resumption of product, service or [[Activity|activity]] delivery after an [[Incident|incident]].
  

Latest revision as of 04:26, 30 October 2020

1. Recovery Time Objective (RTO) refers to the maximum acceptable length of time that can elapse before the lack of a business function severely impacts the organization. This is the maximum agreed time for the resumption of the critical business functions.

The RTO is comprised of the following components: Starting from the point of disaster, the time before a disaster is declared, the time to perform tasks (as documented in the BC or DR plan) to the point of business resumption whereby the data which was lost, up to the point of disaster, is restored. See complete diagram of these three concepts shown below.

Related Terms: Recovery Objectives, Recovery Point Objective (RPO)

BCMBoK Competency Level
BCMBoK 3: Business Impact Analysis CL 1B: Foundation (BC)


BCMBoK Competency Level
BCMBoK 3: Business Impact Analysis CL 1C: Foundation (CM)


BCMBoK Competency Level
BCMBoK 3: Business Impact Analysis CL 1D: Foundation (DR)



(Source: Business Continuity Management Institute - BCM Institute)

2. Period of time following an incident within which

Recovery Objectives: RTO, RPO and MTPD
  • Product or service must be resumed, or
  • Activity must be resumed, or
  • Resources must be recovered.

Note : For products, services, activities, the recovery time objective must be less than the time it would take for adverse impacts that would arise as a result of not providing a product/service or performing an activity to become unacceptable.

(Source: ISO 22301:2012 – Societal Security – Business Continuity Management Systems - Requirements) - clause 3.45

3. Target time set for resumption of product, service or activity delivery after an incident.

(Source: AE/HSC/NCEMA 7000:2012)

4. Target time set for resumption of product, service or activity delivery after an incident.

(Source: British Standard BS25999-1:2006 Code of Practice for Business Continuity Management)

5. The period of time within which systems, applications, or functions must be recovered after a disruption has occurred. For example, critical business functions must be restored within 4 hours upon occurrence of a disaster.

(Source: Singapore Standard 540 - SS 540:2008)

6. An essential output from the BIA that identifies the time by which Mission Critical Activities and/or their dependencies must be recovered.

(Source: Business Continuity Institute - BCI)

7. The period of time within which systems, applications, or functions must be recovered after an outage (e.g. one business day). RTOs are often used as the basis for the development of Business Continuity Strategy, and as a determinant as to whether or not to implement the Business Continuity Strategy during a disaster situation. SIMILAR TERMS: Maximum Allowable Downtime.

(Source: Disaster Recovery Institute International / Disaster Recovery Journal - DRII/DRJ)

(Source: Malaysia BCM Standard MS1970:2007)

8. The period of time required to fully re-establish adequate resource requirements.

(Source: HB 221:2004 Business Continuity Management)

(Source: Australia. A Practitioner's Guide to Business Continuity Management HB292 - 2006 )

9. The period of time required to fully re-establish adequate resource requirements to recover a critical activity, process, function, or other capability, to a required minimum operational level.

NOTE: The time required to recover capability to achieve the RPO may be additional to the RTO.

(Source: AS/NZS 5050.2 Australian and New Zealand Standards for business continuity management.

Part 2: Business continuity management practice standard)

10. The period of time within which systems, applications, or functions must be recovered after an outage (e.g. one business day).

(Source: Business Continuity Institute - BCI)

(Source: ENISA - the European Network and Information Security Agency. BCM & Resilience Glossary)