RPO
Also called: recovery point objective
Recovery point objective: the point in time to which data must be restored after an outage, in other words how much recent data you can afford to lose. It sets how often you back up or replicate: if losing more than a few minutes of orders is unacceptable, a nightly backup is not enough, and at least one copy must be out of an attacker's reach.
Further reading: csrc.nist.gov
From the Security Academy
Backup Strategy: the 3-2-1 Rule, Immutable Copies and Restore Drills
Backups are the last line of defence against ransomware only if they survive and restore. Covers 3-2-1, offline and immutable copies, RPO/RTO and drills.
8 min read ·
Advisories that mention this term
Taiwan's digital ministry warns AI-automated attacks are targeting corporate personal data; over 10 firms have reported being hit
According to CNA, Minister of Digital Affairs Lin Yi-jing said on Nov 11 that more than 10 companies have reported being hit by cyberattacks, five or six of them large, and most incidents appear tied to AI-driven attacks .
SEGA confirms 2,196,044 newsletter email addresses leaked from a contracted delivery system
SEGA Corporation said on 9 November 2026 that a delivery system of Arara Inc.
Third party breaches a Nitori system; up to 37.62 million member and shopper records may have leaked
Japanese furniture retailer Nitori Holdings said on November 9 that it confirmed unauthorized third-party access to a system it manages on November 6 and that up to 37.
Tokyo Metropolitan Bureau of Waterworks Reports Four Missing Hard Drives and Contractor Loss of Customer Documents
According to Security NEXT, the Tokyo Metropolitan Bureau of Waterworks discovered on October 2, 2026, that only empty storage boxes remained inside a locked cabinet while four hard drives were missing .
Fukuoka Prefecture Application File Left Open for Online Editing, Exposing Personal Data of 183 Corporate Officers
According to Security NEXT, an improperly configured application file on the website for Fukuoka Prefecture's nursing care workplace certification program allowed personal data of 183 corporate officers across 24 organizations to be viewed by third parties .