Question

A financial services firm completes a business impact analysis for its transaction processing system. Business owners state that, following a disruption, the firm can tolerate losing no more than 15 minutes of transaction data before regulatory and reconciliation problems become unacceptable. The current backup schedule captures full snapshots every 4 hours. Which action should the risk practitioner recommend to align the recovery strategy with this requirement?

Accepted Answer

Implement more frequent data replication (such as near-continuous or synchronous replication) to meet the 15-minute recovery point objective (RPO)

Answer

Reduce the recovery time objective (RTO) so the system can be restored within 15 minutes of an outage

Answer

Increase the maximum tolerable downtime (MTD) to accommodate the existing 4-hour backup window

Answer

Retain the 4-hour backup schedule but store copies at an additional offsite location for redundancy