RTO (Recovery Time Objective)
Last updated
Definition
RTO is the maximum acceptable time between a failure and the moment a system or business function is usable again – measured to "staff are working," not to "the restore job started." It answers how long the client can be down. Its companion, RPO, answers how much data they can afford to lose; the two are set separately and drive different parts of the backup design.
Why it matters to an MSP
The RTO chooses the recovery method, and the recovery method sets the price tier. A four-hour RTO on a line-of-business server cannot be met by pulling a 2 TB image back from cloud storage over a 200 Mbps line – that is most of a day before Windows repair even starts. Hitting it requires a local appliance that boots the last backup as a virtual machine in minutes, with a cloud copy for site loss. That design typically runs $250–$500 per server per month, versus $50–$150 for direct-to-cloud image backup that honestly delivers next-day recovery, and $5–$15 per workstation for cloud endpoint backup with a 1–3 day RTO. Set the objective per system, not per client: the practice-management server and the marketing file share do not need the same tier.
Write the negotiated RTO into the service agreement and the business continuity plan, and have clients who decline Tier 1 pricing for Tier 1 systems sign that decision. Then test it: the annual DR exercise measures actual recovery time against the contracted RTO, and any gap is either a roadmap sale or a liability you are carrying unpriced. A contracted RTO you have never rehearsed is a promise, not a capability. Backup and recovery design covers how the tiers map to architecture.
Related terms: RPO, BDR, DRaaS, Business Continuity Plan