Modifying the BIA Results
Adjusting the RTO and Business Impact
As an GRC Manager, you may edit the computed indicators and adjust them.
You can enter new values in the following fields:
• Adjusted RTO
• Adjusted business impact
Entering the RPO (Recovery Point Objective)
The Recovery Point Objective (RPO) determines the point to which information used by an activity must be restored to enable the activity to operate on resumption or the maximum acceptable amount of data loss measured in time.
According to ISO 22300:2011, The RPO (Recovery Point Objective) is the point to which information used by an activity is restored to enable the activity to operate on resumption.
Example: time elapsed between the last backup and the moment the incident happened.
The “0” value corresponds to “0 data loss”.
Entering the WRT (Work Recovery Time)
The WRT (Work Recovery Time) specifies the maximum of time tolerated to check the system and/or data integrity.
It can involve checking databases or logs to ensure that the applications or services are available. Once all the systems have been checked and/or recovered, it is possible to resume production.
The WRT corresponds to the time the organization is ready to wait to go from a degraded operating mode to a “back to normal” mode.

When added to the RTO, the WRT allows to obtain the MTD (Maximum Tolerable Downtime).