IT Examiner School eBook May 2025

Internal Use Only

Recovery Metrics & Process Prioritization • After completing the BIA, management should establish formal recovery metrics which will be used to prioritize process recovery and design testing scripts • Metrics should include:

• Recovery Time Objectives (RTOs) • Recovery Point Objectives (RPOs) • Maximum Tolerable Period of Disruption (MTPDs) • Recovery Work Time

Internal Use Only

Identify Risk Management Strategies

Develop processes to minimize disruptions of service to the Licensee’s customers and operations. Ensure plans and agreements are in place with vendors. Provide employee training.

Test

10