Business Continuity, RTO and RPO, Impact Analysis

Cyber Log — October 19, 2025

Focus Areas: Business Continuity, RTO and RPO, Impact Analysis

---

Objectives

Deepen resilience planning knowledge by studying quantitative recovery metrics.

---

Activities & Labs

• Defined recovery time objective (RTO) and recovery point objective (RPO) thresholds.
• Simulated impact analysis steps: request, initial assessment, impact analysis, risk assessment, mitigation, approval, implementation, monitoring.
• Recorded relationships between RTO/RPO and overall business continuity strategy.

---

Knowledge & Concept Highlights

• RTO defines how long systems can be down; RPO defines acceptable data loss.
• Impact analysis quantifies the effect of interruptions on operations.
• Documentation ensures repeatability of recovery processes.

---

Reflections & Takeaways

Clear alignment formed between technical recovery mechanisms and business priorities.
Impact analysis provides justification for infrastructure investment.

---

End of Log — October 19, 2025