Audit glossary

Recovery point objective (RPO)

The most data, measured in time, the business can afford to lose.

CISA

An RPO of two hours means backups or replication must make it possible to restore data to no more than two hours before the outage. It drives backup frequency and replication choices. The business, not IT, sets it.

On the exam

If the question is about acceptable data loss, the answer is RPO. A very low RPO points to continuous replication or mirroring.

Related terms

Test yourself with today’s question of the day.