Risk Attribute

Recovery Time Objective

Expert-reviewed Updated: 2026-09-03 Expert-reviewed: 2026-09-04 (Guido Hesse, Hesse Group Holding AG) Version 0.1.0

Recovery time objective (RTO) records the target maximum time within which a critical process, system or facility must be restored after a disruption, as defined in the insured's business continuity plan and queried in business interruption proposal forms.

Category
Business interruption/Supply chain · days
Data type
Number
Risk drivers
Severity, Moral hazard
Underwriting impact
Premium, Condition/Warranty

Typical proposal-form questions

  • What recovery time objective has been defined for each critical process, and on what business impact analysis is it based?
  • Has the RTO been tested through a table-top exercise or full-scale drill, and when was the last test performed?
  • Do current resources (staff, IT, alternative sites) actually support achieving the stated RTO in a real event?

Evidence

  • Business impact analysis
  • Business continuity plan
  • Test and exercise reports

Why it matters for underwriting

The recovery time objective is the target that the insured’s own continuity planning sets for itself, and it tells underwriters how quickly the business expects to be back on its feet independent of the indemnity period stated in the policy. A short, credible and tested RTO signals genuine resilience, while a long or untested RTO signals that a disruption is likely to run its full course with limited internal mitigation, directly increasing the expected duration and severity of a business interruption loss.

Capturing the attribute and evidence

Proposal forms ask for the RTO defined for the insured’s most critical processes and the business impact analysis it is derived from. Underwriters look for evidence that the RTO is not just a planning figure but has been validated through table-top exercises or full-scale drills, cross-referencing the stated target against the business continuity plan, exercise reports and any lessons learned from actual incidents.

Effect on coverage, premium and conditions

A short, tested and adequately resourced RTO supports standard indemnity periods and pricing, and can justify a reduced contingent business interruption limit where continuity planning demonstrably shortens recovery. An RTO that is unrealistic given available resources, or that has never been tested, undermines confidence in the stated indemnity period and can prompt a recommendation to extend it, a premium loading, or a condition requiring periodic BCM testing evidence.

Mitigation measures

Insurers and risk engineers typically recommend anchoring the RTO in a documented business impact analysis, validating it through regular exercises rather than assumption, securing the resources (redundant sites, stock, IT failover, trained deputies) needed to actually achieve it, and revisiting the target whenever the underlying process or its dependencies change.

Standards and codes

  • ISO 31000:2018 – Risk management, Guidelines