iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A recovery point objective (RPO) is the point in time to which data must be recovered after an outage. It expresses how much recent data an organization can afford to lose: with a one-hour RPO, recovered data must be no more than one hour older than the disruption. RPO is about the age of recovered data—not how long it takes to restore service.
What does recovery point objective mean?
NIST’s Computer Security Resource Center defines RPO as “the point in time to which data must be recovered after an outage,” attributing the definition to NIST Special Publication 800-34 Rev. 1. Put simply, an RPO describes the maximum acceptable gap between a disruption and the latest point in time from which data can be restored.
For example, if an organization sets a four-hour RPO, its recovery plan should restore data to a point no more than four hours before the disruption. That is an example, not a generally recommended target. NIST’s guide frames RPO around the most recent backup copy and the amount of data loss the mission or business process can tolerate. The definition does not require a particular backup technology or guarantee that a backup will be usable.
RPO vs. RTO vs. MTD
These measures address different parts of recovery planning. RPO concerns recoverable data; RTO and MTD concern time and service availability.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
| Measure | What it captures | Practical question |
|---|---|---|
| RPO | The point in time before a disruption to which data must be recoverable; it reflects tolerable data loss. | How far back can the recovered data be? |
| RTO | The maximum time a system resource can remain unavailable before the impact becomes unacceptable. | How long can restoration take? |
| MTD | The total disruption or outage duration an organization is willing to accept. | What is the outer limit for the outage? |
NIST says RTO must normally be shorter than MTD so recovery can finish before the tolerable outage period is exceeded. RPO is a separate measure of data-loss tolerance. NIST’s SP 800-34 Rev. 1, published May 30, 2010 and updated through November 11, 2010, is federal information-system contingency-planning guidance; it does not by itself establish binding requirements for every industry or jurisdiction.
How an organization chooses an RPO
The right RPO depends on the impact of losing recent data and on the needs of the mission or business process supported by the system. NIST recommends identifying RPOs for the processes that rely on a system and documenting the reasons behind those targets. A definition alone does not prescribe a backup interval or a universal RPO.
Rank #2
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
- Consider what work or records could be lost if the system is restored to an earlier point.
- Assess how much data loss the affected process can tolerate.
- Set the target in the context of contingency-planning priorities for that process.
A shorter RPO means less data loss is acceptable: recovery must reach closer to the time of the disruption. The specific recovery capability needed to meet that target depends on the organization’s plan and system context.
How to read an RPO in practice
Read the stated RPO as a limit on the age of recoverable data, not as a promise about when the system will be available again. For example, a four-hour RPO means data should be recoverable from a point within the four hours before the disruption; it does not mean the system must be back online within four hours. The availability deadline is the kind of requirement RTO addresses.
Quick Recap
Rank #3
- Plug-and-play expandability
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
