Ironing out recovery time objectives (RTO) and recovery point objectives (RPO) is crucial to balancing what stakeholders want and what it will cost to meet those expectations.

The RPO is slightly different. This dictates the allowable data loss -- how much data can I afford to lose? In other words, if I do a nightly backup at 7:00 p.m. and my system goes up in flames at ...