MField MEA Recovery Point Objectives (RPOs) and Recovery Time Objectives (RTOs)

1. Recovery Point Objective (RPO)

Definition: The Recovery Point Objective (RPO) specifies the maximum acceptable amount of data loss measured in time. It determines the point in time to which data must be recovered to resume normal operations after a disruption.

RPO for MField MEA: The RPO is defined as one day. Data is backed up encrypted to OneDrive and Google Drive daily, ensuring that in the event of a disruption, data loss should not exceed one day's worth of transactions or changes.

2. Recovery Time Objective (RTO)

Definition: The Recovery Time Objective (RTO) specifies the maximum acceptable downtime for restoring services or systems to operational status after a disruption.

RTO for MField MEA: The RTO is defined as 4 hours. This means that in the event of a disruption, the impacted systems and services, including data stored on the NAS and cloud backups, must be restored and operational within 4 hours.

3. Backup and Data Retention Strategy

• Data from the NAS system is backed up encrypted to OneDrive and Google Drive daily, ensuring that multiple copies of critical data are maintained in secure offsite locations.
• The NAS system maintains data for one week, replacing data day by day (e.g., Monday's data is replaced the next Monday), providing a rolling one-week retention period.

4. Considerations

• Regularly monitor and verify the integrity and completeness of backups stored on OneDrive and Google Drive.
• Conduct periodic tests of data restoration processes to ensure that backups can be effectively restored within the defined RTO.
• Review and update RPOs and RTOs periodically to align with evolving business needs, technological advancements, and regulatory requirements.