What is RPO (recovery point objective)?

A target expressing to what point in time data must be recoverable when a failure or disaster occurs. With an RPO of 1 hour, at most the last hour of data may be lost, so backups or copies of the data must be taken at least every hour.

Japanese name: RPO(目標復旧時点)

RPO (recovery point objective) appears in 3 practice questions across 2 topics, including System Architecture and Reliability, IT Service Management and Systems Audit.

Field: System Architecture and Reliability

RPO and RTO

The RPO is a target for how far back recovery may go, that is, the amount of data that may be lost expressed in time. The RTO (recovery time objective) is a target for how long resumption may take. For example, with an RPO of 4 hours and an RTO of 2 hours, a failure must not lose data older than 4 hours, and business must resume within 2 hours. They are separate targets, so a scheme that meets both must be chosen.

Ways to meet the RPO

When protection relies on periodic backups alone, a failure just before the next backup loses data for the whole backup interval. The backup interval is therefore made no longer than the RPO. To bring the RPO down to minutes or near zero, database update logs are sent frequently to another location, or replication copies data to another server.

Synchronous and asynchronous replication

Synchronous replication completes an update only after confirming that the write has also finished at the replica, so no data is lost on failure (an RPO of zero). In exchange, the round-trip communication time to the replica is added to every update, so responses become slow between distant sites. Asynchronous replication sends copies later, so responses are fast, but data not yet sent may be lost on failure.

Try it: questions about RPO (recovery point objective)

In business continuity planning, which describes the RPO (recovery point objective)?

  1. AA target expressing up to what point in time data must be recoverable when a failure occurs (how far back data loss is tolerated)
  2. BA target for the time allowed from the occurrence of a failure until business operations or the system resume
  3. CThe average time from one failure of a system until the next
Show answer and explanation

Answer: A. A target expressing up to what point in time data must be recoverable when a failure occurs (how far back data loss is tolerated)

The RPO (recovery point objective) is a target expressing to what point in time the data must be restorable when a failure occurs. For example, an RPO of 1 hour means the data must be restorable to a point within the hour before the failure, so backups or copies of the data must be taken at least every hour. The time allowed until business resumes is the RTO (recovery time objective), and the shorter the RPO and RTO, the more the required facilities cost.

For a system, the RPO (recovery point objective) is set at 4 hours and the RTO (recovery time objective) at 2 hours. A failure can occur at any time, and the time taken to make a backup is negligible. Which data protection scheme meets these targets?

  1. ABackups are taken every 1 hour, and recovery takes 3 hours when a failure occurs
  2. BBackups are taken every 3 hours, and recovery takes 1.5 hours when a failure occurs
  3. CBackups are taken every 6 hours, and recovery takes 1 hour when a failure occurs
Show answer and explanation

Answer: B. Backups are taken every 3 hours, and recovery takes 1.5 hours when a failure occurs

If a failure occurs just before the next backup, data for the whole backup interval is lost, so meeting the RPO requires a backup interval no longer than the RPO. Also, the recovery time must be no longer than the RTO. With backups every 3 hours and recovery in 1.5 hours, at most 3 hours of data is lost (4 hours or less) and recovery takes 1.5 hours (2 hours or less), so both are met. The 1-hour scheme fails the RTO, and the 6-hour scheme fails the RPO.

FAQ

Are shorter RPOs and RTOs always better?

Shorter ones reduce the impact of failures, but the cost of replication, standby equipment and operational effort grows. It is common to decide them for each business by comparing the losses from stopped business or lost data with the cost of the measures.

Can a system with an RPO of zero be built?

With synchronous replication, a configuration that loses no data up to the moment of failure is possible. However, if data is corrupted by a mistaken operation or a software bug, the corrupted state is replicated as well, so backups that can return to past points in time are still needed separately.

RPO (recovery point objective) in the explanations

Questions that mention RPO (recovery point objective) (3)

  1. In business continuity planning, which describes the RPO (recovery point objective)?
  2. For a system, the RPO (recovery point objective) is set at 4 hours and the RTO (recovery time objective) at 2 hours. A failure can occur at any time, and the time taken to make a backup is negligible. Which data protection scheme meets these targets?
  3. Which of the following is an appropriate way to draw up a business continuity plan (BCP)?

Books on System Architecture and Reliability Ad

As an Amazon Associate I earn from qualifying purchases.

Related terms

RTO (recovery time objective) BCP (business continuity plan) Differential backup Dual system Duplex system Fail-safe Fail-soft Fault tolerance Fool-proof Hot standby

Back to the glossary