Exam CISM topic 1 question 653 discussion

A recovery point objective (RPO) is required in a disaster recovery plan (DRP).

A Recovery Point Objective (RPO) is a key component of a Business Continuity Plan (BCP). It specifies the maximum amount of data loss a business is willing to tolerate and is used to guide the development of data backup and disaster recovery strategies. RPO is an important factor in determining the frequency and type of data backups, as well as the type of disaster recovery solution to implement. In a BCP, RPO helps ensure that the business can continue its operations with minimal data loss in the event of a disaster.

I chose D, but I agree that the question itself is flawed, because both A and D are correct. Below are 2 quotes to proof (quote from the CISM All-in-one Exam guide): "Components of a Business Continuity Plan: [...] Analysis documents [...] Documents defining recovery targets such as RTO, RPO, RCO, and RCapO" (p. 452). Hence RPO is needed in BCP. "The outputs from these activities are the key inputs for DRP [...] Key recovery targets specify how quickly specific IT applications are to be recovered" (p. 455). Hence, RPO is needed in DRP AS WELL. Still, from a gut-feel, I think they want option D to be the right answer, because the RPO is "more needed" in the DRP than in BCP (if that's a valid reason to defend...).

Select Answer: D RPO is for backup and backup is under DRP. RTO is the recovery of services that fall under BCP.

It's D. BCP focuses on a high-level business perspective.

Not cool to have both BCP and DRP in the answers. Still, it's directly in DRP.

I think is D...

RPO is for Data Restoration, Data Restoration is linked with DRP in the overarching BCP process. so DRP is the correct choice for me.

someone could argue the DRP is included in the BCP. But RPO is clearly defined in the DRP. I also don't like that both are options.

Not sure why A is considered the better answer when its 5 votes for D and 2 votes for A. The correct answer is D.

D. Disaster recovery plan (DRP) Really do not like that BCP and DR are both answers because RPO could and should be considered in both. BCP take a broad approach to the overall continuity of the business. Maybe I’m looking at this wrong but BCP more how long the business can tolerate being down more so than the point in time we are recovering to. Whereas RPO is going to be clearly defined in DRP.

A Recovery Point Objective (RPO) is a metric that specifies the maximum acceptable amount of data loss measured in time. It determines how much data an organization can afford to lose before it affects business operations. This concept is most directly associated with Disaster Recovery Plans (DRP) because it helps in defining the data backup strategies and the frequency of backups. While RPO considerations might influence aspects of other plans, it's primarily a core component of a DRP.

D. Disaster recovery plan (DRP) The RPO is a critical parameter in a disaster recovery plan (DRP) that specifies the maximum allowable data loss in the event of a disaster or significant system failure. It helps organizations determine how frequently they need to back up their data and implement data replication or other backup strategies to meet their recovery goals. The RPO is a key component of ensuring data availability and continuity during and after a disaster.

D. Disaster recovery plan (DRP)

D. Disaster recovery plan (DRP)

D. Disaster recovery plan (DRP)

a Business Continuity Plan (BCP) typically includes an Incident Response Plan (IRP) and a Disaster Recovery Plan (DRP) as integral components.