Making evidence to RPO and RTO

The Recovery Point Objective (RPO) and Recovery Time Objective (RTO) are identified and documented during the Business Impact Analysis.

When identifying which impacts can occur to a business process due to a disruptive event, and how they evolve over time, you can gather evidence to support the definition of RPO and RTO.

In the Business Impact Analysis toolkit you bought, there is a Business Impact Analysis Questionnaire you can use to document the information needed to define the RPO and RTO.

This article will provide you a further explanation about RTO and RPO:

• What is the difference between Recovery Time Objective (RTO) and Recovery Point Objective (RPO)? https://advisera.com/27001academy/knowledgebase/what-is-the-difference-between-recovery-time-objective-rto-and-recovery-point-objective-rpo/

This material will also help you regarding RTO and RPO:

• Book Becoming Resilient: The Definitive Guide to ISO 22301 Implementation https://advisera.com/books/becoming-resilient-the-definitive-guide-to-iso-22301-implementation/