Who would be in the BEST position to determine the recovery point objective (RPO) for business
applications?

A.
Business continuity coordinator

B.
Chief operations officer (COO)

C.
Information security manager

D.
Internal audit

Explanation:

The recovery point objective (RPO) is the processing checkpoint to which systems are recovered.
In addition to data owners, the chief operations officer (COO) is the most knowledgeable person to
make this decision. It would be inappropriate for the information security manager or an internal
audit to determine the RPO because they are not directly responsible for the data or the operation.