Study. uk . com
  1. Home
  2. All questions
  3. Question 133

CISSP study material · question 133 of 500

An architect proposes a recovery time objective of 36 hours for a process whose maximum tolerable downtime is also 36 hours, arguing the two should match. Why does NIST SP 800-34 disagree?

  1. The objective applies only to high impact systems and cannot be set here.
  2. The objective must always be exactly half the tolerable downtime.
  3. The objective governs data loss, so it cannot be compared with downtime at all.
  4. Work such as reprocessing data must also fit inside the tolerable downtime, so the objective must normally be shorter.
Show the answer

Answer: D. Work such as reprocessing data must also fit inside the tolerable downtime, so the objective must normally be shorter.

The recovery time objective must ensure the maximum tolerable downtime is not exceeded, and time spent reprocessing after restoration counts against it, so it is normally shorter.

Source: NIST SP 800-34 Rev. 1 (NIST) — SP 800-34 Rev. 1 > 3.2.1 Determine Business Processes and Recovery Criticality

Challenge yourself on this topic → Study as cards