Recovery Time Objective
What is Recovery Time Objective?
The maximum acceptable duration for restoring a business function or IT system after a disruption before unacceptable consequences occur.
Terms that appear alongside recovery time objective
Each of these is named in at least one of the same controls as recovery time objective. The number is how many controls name both.
- recovery point objective 11 shared controls
- disruption 8 shared controls
- disaster recovery 8 shared controls
- nist 8 shared controls
- business continuity 6 shared controls
- ransomware 6 shared controls
- iso 22301 5 shared controls
- resilience 5 shared controls
Frameworks that govern recovery time objective
What the standards actually require on recovery time objective
Requirements naming recovery time objective across 6 standards, quoted from the control text.
Where determined by the Commission to be a critical financial market or a critical swap data repository, maintain a recovery plan and resources sufficient to achieve a same day recovery time objective even in a wide scale disruption.
CFTC-SS-25 · Same Day Recovery Time Objective for Critical Entities →The organization must set up, operate and keep a formal, recorded assessment process that finds and values assets so as to reveal which activities, functions, services and products, which partnerships and supply chains and which stakeholder relationships are c...
asis-spc-1-2009-organizational-resilience-standard::4.3.1 · 4.3.1 A formal, documented risk assessment and impact analysis with recovery time objectives →The BIA must determine the point in time, the recovery time objective, at which the impacts of a disruption become unacceptable to the entity.
nfpa-1600-standard-on-continuity-emergency-and-crisis-management::5.3.2.1 · 5.3.2.1 The recovery time objective determined →Continuity management covers backup and restore, business continuity planning and disaster recovery planning. Data, records, configuration and software are backed up to a strategy that meets the defined recovery point and recovery time objectives, stored separ...
gamp-5-good-automated-manufacturing-practice::4.3.6 · 4.3.6 Operation: Continuity Management →Develop alternate processing site agreements that contain priority-of-service provisions in accordance with availability requirements including recovery time objectives.
fbi-cjis-security-policy::CP-7(3) · CP-7(3) Alternate Processing Site | Priority of Service →The institution has validated that it can remediate systems damaged by zero-day attacks within its current recovery time objectives.
ffiec-cybersecurity-assessment-tool-cat::D5.IR.Te.Inn.2 · D5.IR.Te.Inn.2 Testing (Innovative 2) →Questions people ask about recovery time objective
What is Recovery Time Objective?
Why is Recovery Time Objective important for compliance?
Which compliance frameworks address Recovery Time Objective?
Where can I learn more about Recovery Time Objective?
See how Recovery Time Objective applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.