Business Impact Analysis (BIA)

Correct Answer: 4 hours

The most appropriate Recovery Time Objective (RTO) for this scenario is 4 hours. While the system must be recovered within 12 hours, setting the RTO to exactly 12 hours leaves no margin for error or unexpected complications. By choosing a shorter RTO of 4 hours, the company allows for a significant buffer period to address any potential issues that may arise during the recovery process. This buffer time is crucial in ensuring that the actual recovery can be completed within the required 12-hour window, even if unforeseen challenges occur. The 4-hour RTO strikes a balance between setting an ambitious recovery goal and providing ample time to handle complications, thus increasing the likelihood of meeting the critical 12-hour recovery requirement.

Correct Answer: Establish recovery strategies for the critical processes

The correct answer is to establish recovery strategies for the critical processes. Once critical processes have been identified, the organization should develop strategies to ensure they can recover from any disruptions. The other options do not directly relate to the next logical step following the identification of critical processes during a BIA.

Correct Answer: Dependencies between critical assets and processes

The correct answer is dependencies between critical assets and processes. Understanding the relationships between critical assets and processes helps to identify all essential aspects of business continuity. Other options, such as physical security, stock value, mission statement, marketing strategies and employee morale, are not directly relevant to the identification of critical assets during a BIA.