Recovery Time Objective
Recovery time objective (RTO) records the target maximum time within which a critical process, system or facility must be restored after a disruption, as defined in the insured's business continuity plan and queried in business interruption proposal forms.
- Category
- Business interruption/Supply chain · days
- Data type
- Number
- Risk drivers
- Severity, Moral hazard
- Underwriting impact
- Premium, Condition/Warranty
Typical proposal-form questions
- What recovery time objective has been defined for each critical process, and on what business impact analysis is it based?
- Has the RTO been tested through a table-top exercise or full-scale drill, and when was the last test performed?
- Do current resources (staff, IT, alternative sites) actually support achieving the stated RTO in a real event?
Evidence
- Business impact analysis
- Business continuity plan
- Test and exercise reports
Why it matters for underwriting
The recovery time objective is the target that the insured’s own continuity planning sets for itself, and it tells underwriters how quickly the business expects to be back on its feet independent of the indemnity period stated in the policy. A short, credible and tested RTO signals genuine resilience, while a long or untested RTO signals that a disruption is likely to run its full course with limited internal mitigation, directly increasing the expected duration and severity of a business interruption loss.
Capturing the attribute and evidence
Proposal forms ask for the RTO defined for the insured’s most critical processes and the business impact analysis it is derived from. Underwriters look for evidence that the RTO is not just a planning figure but has been validated through table-top exercises or full-scale drills, cross-referencing the stated target against the business continuity plan, exercise reports and any lessons learned from actual incidents.
Effect on coverage, premium and conditions
A short, tested and adequately resourced RTO supports standard indemnity periods and pricing, and can justify a reduced contingent business interruption limit where continuity planning demonstrably shortens recovery. An RTO that is unrealistic given available resources, or that has never been tested, undermines confidence in the stated indemnity period and can prompt a recommendation to extend it, a premium loading, or a condition requiring periodic BCM testing evidence.
Mitigation measures
Insurers and risk engineers typically recommend anchoring the RTO in a documented business impact analysis, validating it through regular exercises rather than assumption, securing the resources (redundant sites, stock, IT failover, trained deputies) needed to actually achieve it, and revisiting the target whenever the underlying process or its dependencies change.
Standards and codes
- ISO 31000:2018 – Risk management, Guidelines