During a BCP exercise, an organization discovers that its Recovery Time Objective (RTO) for a critical system is 4 hours, but actual recovery takes 7 hours. What is the BEST corrective action?
-
A
Accept the gap and update the BCP documentation
-
B
Revise the RTO upward to match actual recovery time
-
C
Implement additional resources or automation to close the RTO gap
-
D
Reclassify the system as non-critical to relax the RTO