A financial services firm has determined that its core trading platform has a recovery time objective (RTO) of 30 minutes. During a disaster recovery review, the IS auditor finds the organization currently relies on a warm site that requires several hours to load recent data backups and configure applications before the platform can resume. Which recommendation should the auditor make to best address this gap?