ABusiness Impact Analysis (BIA)is the correct document thatidentifies critical servicesand definesRecovery Point Objectives (RPOs)andRecovery Time Objectives (RTOs). It helps organizations determine the impact of downtime and the maximum tolerable outages for business functions.
[Reference:, CompTIA CySA+ Study Guide – Chapple & Seidl, Chapter 9, CySA+ Exam Objectives: Domain 3.0 – Incident Response and Management, , , , , ]
Submit