• Products
    • Cohesity Data Cloud

      Cohesity Data Cloud

      A unified platform for securing, managing, and extracting value from your data, available as self-managed software and SaaS.

    • DataProtect

      DataProtect

      Simplify your data protection, ensure recovery, and defend against ransomware with a modern, hyperscale solution.

    • FortKnox

      FortKnox

      Isolate your data to further strengthen your ransomware protection and recovery strategy with our SaaS solution.

      • Highly secure data vault providing a “virtual air gap”
      • Immutability, quorum, and other features to protect data from malicious activity
      • Dramatically simple deployment and acquisition
    • DataHawk

      DataHawk

      Protect against ransomware with threat intelligence and scanning, cyber vaulting, and ML-powered data classification—all in one simple solution.

    • SmartFiles

      SmartFiles

      The smartest way to optimize cost, scale, and efficiency for your unstructured data. Manage, secure, and do more with your data with next-level software-defined file and object services for the hybrid cloud.

      • Software defined
      • Unified file and object services
      • Massive scale with optimized efficiency
    • SiteContinuity

      SiteContinuity

      Automated disaster recovery failover and failback orchestration strengthens business continuity strategies. Get always-on accessibility without adding infrastructure silos, operational complexity or cost.

    • Cloud Services

      Cloud Services

      Radically simplify the way you protect, secure, govern, and analyze data with a comprehensive portfolio of Cohesity Cloud Services offerings.

    • Marketplace

      Marketplace Overview

      Defend against cyberthreats and speed access to insights with apps from Cohesity and industry partners.

      • Analytics
      • Compliance
      • Data recovery and migration
      • Malware defense
    • Certified Platforms

      Certified Platforms

      Confidently run Cohesity software in your data center, in the cloud, or at the edge with certified solutions from Cohesity and our partners.

  • Support
    • Support Overview

      Support Overview

      We know you’re busy, so when something doesn’t work quite right, our experts are here to help you fix it, fast.

    • User Group

      User Group

      The Cohesity User Group connects a passionate community of data security and management professionals to engage in purposeful conversations, explore best practices, and build new friendships.

    • Cohesity Academy

      Cohesity Academy

      Build your multicloud data management skillset. Cohesity Academy delivers training, education, and certification in ways that make the most sense for both you and your business.

  • Customers
    • Index

      Customers

      Discover what customer-centric means at Cohesity. Learn why enterprises worldwide choose Cohesity to transform their data management.

A recovery time objective (RTO) is the acceptable amount of time—agreed upon by IT and application owners—to restore functionality when an application, service, data or other digital asset becomes inaccessible due to an outage or data loss event, such as a ransomware attack.

In practice, RTOs act as service-level agreements between the IT organization and the business. Similarly, recovery point objectives (RPOs) are shared decisions about how far back in time the organization can tolerate losing data, RTOs are a measurement of acceptable downtime. Both are important when developing a disaster recovery plan.

But there’s a growing divide in organizations between RTO expectations and reality, that an effective disaster recovery strategy and solution can bridge. The first step in closing the gap requires IT and application owners to come together to think through their RTOs and their impact on the business.

RTOs: The race to zero

Applications power today’s businesses. After years of digital transformation and rapid digital services adoption during the pandemic, it’s safe to say that these apps are instrumental to how people live, work, and play today. Before the cloud reset digital access and delivery expectations, application owners may have agreed to hours or days of disrupted operations. Now, their assumption is just a few minutes.

But all applications are equally critical to your customers or your business operations. That means IT and business owners have to strategically prioritize the mission-critical applications and adopt technologies that support the lowest RTO goals.

For example, healthcare organizations might prioritize the RTO of patient monitoring and clinician resource databases over patient billing applications. In financial services, a real-time trading application would likely be ranked higher in business criticality than an application generating client investment summaries.

6 RTO best practices

Whether your organization is establishing new or revisiting existing RTOs, consider these six best practices:

  1.     Assess risk tolerance with stakeholders

A candid conversation with each application owner to determine their downtime tolerance and its impact on the business are critical to setting RTO goals not only for a particular application but for the entire organization’s technology portfolio. During these meetings, leaders can assess whether application RTO expectations align with today’s downtime expectations. For example, if an application now pulls customer records in real time from an on-premises database, that database may now be considered more mission-critical than it was when it was originally deployed.

  1.     Set realistic service-level agreements (SLAs)

A good place to begin evaluating SLAs is to review their importance. Clearly defined and agreed upon SLAs help manage expectations between the customer (application owner) and the IT team, and are important in building trust. SLAs ease the concern over risk, and help define what happens in the event of a disaster. They define the urgency of actions to keep IT teams focused on what apps and data matter most. What level of always-on the business needs will help to determine SLAs, and downstream RTO goals.

  1.     Rank applications into tiers by their importance to the business

After meeting with key stakeholders, stack rank the applications into recovery tiers based on current realities and business requirements. Again, not every application should have a mission-critical recovery time objective. As much as possible, standardize RTOs by tier so the recovery plan is simpler to follow. Should a disaster happen, such as a successful ransomware attack or an employee deleting the wrong file, the process should be clear.

As part of the ranking and tiering process, the stakeholders should evaluate the recovery methods based on the downtime tolerance, and the various ways to achieve recovery.  For instance, for mission-critical applications like user authentication services, customers might deploy an automated failover/fallback solution. But for business-critical applications, a snapshot-based backup and recovery might do the job.

  1.     Assess existing backup and DR technology effectiveness

Organizations often have significant, long-standing investments in backup and disaster recovery technologies that are perfectly adequate for RTO goals of hours, days, or months. Evaluate if that same technology can meet today’s demands, say to rapidly recover hundreds or thousands of virtual machines (VMs) or Microsoft 365 mailboxes nearly instantly.

  1.     Investigate modern backup and recovery technologies—capabilities and benefits

Modern data management solutions have readiness capabilities to address the varied tiers of application recovery businesses require:

  • Fully hydrated snapshots – Having snapshots with the latest changes already applied means you can recover nearly to any point in time, instantly. With normal incremental forever backups, at the time of recovery, the incremental changes have to be applied to the last “full” backup to recover to a specific point in time. Having those incremental changes applied eliminates unnecessary data copies and accelerates data recovery, to quickly restore VMs, instant NAS access and databases like Oracle, and thus meeting the recovery SLA or RTO.
  • Continuous data protection (CDP) – Automation in a CDP offering ensures the recovery of all mission-critical data, not just some of it. It also provides teams with the failback/fallback flexibility to choose an RPO just seconds before the data loss event to minimize data loss and downtime.
  • Flexibility – Modern data management solutions provide simple and flexible solutions that allow the recovery of a single or multiple files, hundreds of VMs, full NAS systems, or any size databases to nearly any point in time and location.
  1.     Perform due diligence
    A number of product offerings claim to help teams achieve rapid RTOs and RPOs. Be sure you evaluate, and see the solution in a sandbox. Plus talk to customers that have used the capabilities to successfully recover quickly from a potentially devastating downtime experience—companies like Sky Lakes Medical Center.

Discover how your organization can race to near-zero RTOs and most effectively maintain business continuity.

Lance Boley
Lance Boley
Lance Boley
Lance Boley

Senior Product Marketing Manager

Lance has more than 20 years of IT experience in storage, virtualization, cloud, and data protection. He has worked as a professional services consultant, system engineer, evangelist, and product marketer. He enjoys talking about technology in a simple but detailed way that is consumable.

Recent Blogs
See All Authors
Senior Product Marketing Manager
Lance Boley
Lance Boley
Senior Product Marketing Manager
Lance Boley
Lance Boley

Senior Product Marketing Manager

Lance has more than 20 years of IT experience in storage, virtualization, cloud, and data protection. He has worked as a professional services consultant, system engineer, evangelist, and product marketer. He enjoys talking about technology in a simple but detailed way that is consumable.
Recent Blogs
See All Authors

You May Also Like

Blog

Next-gen automated disaster recovery for critical business applications and data

- By Amit Sinha

Learn more
Blog

How to Achieve a Near-Zero RPO for MongoDB

- By Mayank Joshi

Learn more
Blog

This One Factor Determines If Your Business Will Ever Recover from a Massive IT Failure

- By Ari Paul

Learn more
X image
Icon ionic ios-globe

You are now leaving the German section of www.cohesity.com/de/ and come to an English section of the site. Please click if you want to continue.

Don't show this warning again