Back to Glossary

Resilience parameter

Recovery Time Objective (RTO)

The maximum acceptable time for restoring a system, service or process after disruption.

Related domain: CybersecurityConcept ID: concept-rto

Definition

Recovery Time Objective (RTO) defines the maximum acceptable time for restoring a system, service or process after a disruption.

Human Explanation

RTO answers the question: how long can the organisation operate without this system, service or process?

Why it Matters

It establishes restoration requirements and helps determine the order in which services and capabilities should be recovered.

Conceptual Boundary

RTO does not specify acceptable data loss; that is the role of RPO. It is also a target, not a measurement of the time actually taken to recover.

Practical Perspective

A shorter RTO usually requires greater investment in architecture, capacity, automation, preparation and testing, so it should reflect genuine business impact.

Related Concepts