Audit glossary

Recovery time objective (RTO)

How quickly a system must be running again after a disruption.

CISA

The RTO is the target time to restore a process or system. A short RTO needs a fast recovery option, such as a hot site; a long RTO can use a cheaper one. It comes out of the business impact analysis.

On the exam

If the question is about acceptable downtime, the answer is RTO. The lower the RTO, the higher the recovery cost.

Related terms

Test yourself with today’s question of the day.