Getting clients to focus on a rational Recovery Point Objective (RPO) and Recovery Time Objective (RTO) can be an effective tool to really and truly force them to consider the true cost of emergency downtime and the rational case for a complete, or more complete, BDR solution for their business.
The concepts are best presented at the beginnings of assisting an organization develop or revamp a disaster recovery plan. Here are some keep-it-simple suggestions for a boiled down presentation of RPO and RTO:
Recovery Point Objective (RPO): The maximum period of time allowed in a disaster recovery plan in which data might be lost and unrecoverable.
Explain that backups can be set at different intervals. Set the backup at a once-a-day interval, and a business can lose a whole day’s data. Set the interval at 15 minutes, and it can lose only 15 minutes of data. Different RPOs are possible for different types of data.
Recovery Time Objective (RTO): The maximum period of time allowed in a disaster recovery plan between when critical network functions cease and when they are restored.
Point out that one business might decide to back up file and folder data only (that is, without the applications and associated configurations, settings, drivers, etc.) This might seem relatively inexpensive, but in an emergency the DR plan would need to allow time for the physical replacement of a destroyed server and critical applications followed by restoration of the file and folder data. That is could mean a very long and costly recovery. Better might be to opt for creating a backed up image of all critical applications and their configurations. The result would be bootable images of all critical servers and a much shorter but still significant RTO in some cases. The ultimate in disaster recovery is when RTO approaches zero by immediate failover to an alternative virtual server in the cloud.
As a suggestion, one might explain that as RPOs and RTOs lengthen, the cost of the backup may fall, but the losses from the disaster, while the business deals with downtime and lost data, will increase. As RPOs and RTOs shorten, the cost of BDR goes up somewhat, but the recovery in any disaster becomes faster, even near instantaneous in some cases, with less lost revenue and fewer wasted resources.
By positioning the BDR market as a spectrum and helping your client determine where they fall on it, that is, what degree of risk and DR cost they are able to accept, many MSPs have successfully leveraged the concepts of RPO and RTO to target and close business.