CISSP BCP & BIA: RPO vs RTO vs MTD Explained

On the CISSP, the RTO and RPO must both fit under the MTD - RPO measures data you can lose looking backward, RTO measures time to restore looking forward. This Domain 1.7 deep-dive walks Business Continuity Planning versus Disaster Recovery, then the full continuity lifecycle and the Business Impact Analysis metrics the exam loves to swap. With Professor Erica, Kai, Beth, and Liam, we make Maximum Tolerable Downtime, Recovery Time Objective, and Recovery Point Objective so distinct that a swapped definition jumps off the screen - plus the manager-mindset reason senior-management support is always the 1st step.

In this video:

• BCP vs DRP: the umbrella that keeps the business running vs the IT subset that restores systems
• The five-phase continuity lifecycle and why senior management signs 1st
• What the Business Impact Analysis actually produces, and what it does NOT decide
• MTD, RTO, RPO, and Work Recovery Time defined with the relationships that gate every plan
• MTBF and MTTR: the reliability pair that supports a tighter RTO
• Resource dependencies, recovery priorities, and the five levels of plan testing

The next video in the series moves into 3rd-party and supply-chain risk management. Anchored to the (ISC)2 CISSP Detailed Content Outline effective April 15, 2024, and NIST Special Publication 800-34 on contingency planning.

▶ Watch next: CISSP Domain 1: Personnel Security (Hire to Fire) https://www.youtube.com/watch?v=OKA9fmzCqc8

📺 Full playlist: CISSP (2026) v2 https://www.youtube.com/playlist?list=PLlIAFxS2964_K3g6WysWnLpifoxilduGi