📖 What is Work Recovery Time (WRT)?
Work Recovery Time (WRT) is the time required to perform necessary checks and data synchronization after systems are restored but before the business process is fully operational. It accounts for the time needed to verify data integrity. Together with RTO, it contributes to the MTD.
"Student, remember the formula: RTO + WRT = MTD. WRT is the time spent cleaning up and verifying data after the system is technically 'up'."
📚 Certification: Certified Information Security Manager (CISM)
🔑 What are the Key Concepts of Work Recovery Time (WRT)?
- ▸ WRT represents the gap between technical system restoration and full business functionality, focusing on data validation, system testing, and final configuration checks.
- ▸ The critical formula for CISM is RTO + WRT = MTD; if the sum exceeds the Maximum Tolerable Downtime, the business faces unacceptable risk.
- ▸ Activities within WRT typically include synchronizing mirrored databases, verifying transaction logs, and performing user acceptance testing to ensure data integrity before going live.
- ▸ Unlike RTO, which focuses on infrastructure availability, WRT focuses on the operational readiness of the business process and the accuracy of the recovered data.
🎯 How does Work Recovery Time (WRT) appear on the CISM Exam?
You may be asked to calculate the Maximum Tolerable Downtime (MTD) given a specific Recovery Time Objective (RTO) and Work Recovery Time (WRT) to determine if a recovery strategy is sufficient.
A scenario might describe a situation where servers are online but employees are manually entering missing data from paper logs; you must identify this as the WRT phase.
Expect questions where you must distinguish between the technical recovery of a system and the operational recovery of a business process to select the correct metric.
❓ Frequently Asked Questions
Why is WRT often overlooked compared to RTO?
Organizations often focus on the technical 'up-time' (RTO) but forget that systems are useless if the data is corrupted or out-of-sync, making WRT critical for actual business continuity.
How does the Recovery Point Objective (RPO) influence the WRT?
A longer RPO means more data was lost since the last backup, which typically increases WRT because more manual data reentry and verification are required before operations resume.
Who is responsible for determining the WRT?
While IT implements the recovery, the business process owners define the WRT based on the time required to verify data and resume normal operations.