A security administrator is reviewing the company’s continuity plan. The plan specifies an RTO of

six hours and RPO of two days. Which of the following is the plan describing?

A.
Systems should be restored within six hours and no later than two days after the incident.

B.
Systems should be restored within two days and should remain operational for at least six
hours.

C.
Systems should be restored within six hours with a minimum of two days worth of data.

D.
Systems should be restored within two days with a minimum of six hours worth of data.