Platform & DevOps·Running it: capacity, failure and recovery
the business says four hours, and the restore has never been timed, so nobody knows whether that is true.
Recovery time objective
Also calledRTO, recovery time
The maximum acceptable time to restore service after a disaster: how long you may be down. It is a business decision that dictates architecture, because an hour and a day buy completely different designs. The only honest way to hold it is to measure a real restore, since an untimed objective is a number in a document rather than a property of the system.