RTO
Also called: recovery time objective
Recovery time objective: how long a system can stay down before the outage starts to harm the business. Set it together with business owners, then prove it with real restore tests. In a ransomware incident, how long operations stop often depends on restore speed, not just on whether backups exist.
Further reading: csrc.nist.gov
From the Security Academy
Backup Strategy: the 3-2-1 Rule, Immutable Copies and Restore Drills
Backups are the last line of defence against ransomware only if they survive and restore. Covers 3-2-1, offline and immutable copies, RPO/RTO and drills.
8 min read ·
Advisories that mention this term
Cyberattack knocks Brazil's Santos Port Authority admin systems offline for nearly a week; Federal Police investigate, port security level raised
Tecnologística reports that Brazil's Santos Port Authority (APS) said it identified a cyberattack as systems restarted after a November 6 power outage, which compromised its files and took administrative systems offline; by November 12 it had recovered about 70% of affected files from backups, and ship movements and land access remain normal .
Fullerton's GDC Holdings had ransomware on servers that briefly halted ERP, with recovery said to be underway
According to iThome, some servers at Fullerton Technology subsidiary GDC Holdings were hit by a ransomware attack on September 7 .
CISA Adds SmarterTools SmarterMail Vulnerability CVE-2026-24423 to Known Exploited Vulnerabilities Catalog
On 2026-02-05, CISA added CVE-2026-24423 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
CISA Adds SmarterTools SmarterMail Vulnerability CVE-2026-23760 to Known Exploited Vulnerabilities Catalog
On 2026-01-26, CISA added CVE-2026-23760 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
CISA Adds SmarterTools SmarterMail Vulnerability CVE-2025-52691 to Known Exploited Vulnerabilities Catalog
On 2026-01-26, CISA added CVE-2025-52691 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .