Exam CISM topic 1 question 242 discussion

C & D are both kind of requirements

Testing gives solid and practical assurance unlike RTO/RPO on paper only. Testing will validate RTO/RPO

Why would RTO be more important than RPO? I would choose A

RTO should be specifically be mentioned in the SLA so that the recovery time framed can be aligned with the organization recovery objective for critical system. Testing requirements are important but for an SLA which is a contract..clearly defined Recovery Time Objective is most important.

A - RTO and RPO can be set as requirements

C. Recovery time objectives (RTOs)

Testing Requirement cover everything including RTO

when outsourcing the disaster recovery function, the MOST important consideration when drafting the service level agreement (SLA) is to establish appropriate Recovery Time Objectives (RTOs). This ensures that the outsourced provider is contractually obligated to recover and restore operations within the specified timeframes, aligning with the organization's business continuity requirements.

C. Recovery time objectives (RTOs)

Option C

When drafting a service level agreement (SLA) for outsourcing the disaster recovery function, the MOST important consideration is the Recovery Time Objectives (RTOs).

Option A makes sense to me. If you can test your DR process from time to time you will be aware of the RTOs and RPOs giving you time in advance to make improvements if it's deemed to be not sufficient.

RTO is the most important reason

SLA is decided by RTO.