Due to a cyberattack, a company's IT systems were not operational for an extended period of time. The company wants to measure how quickly the systems must be restored in order to minimize business disruption. Which of the following would the company most likely use?

Recovery Time Objective (RTO) is the maximum acceptable downtime for a system or application after a disaster or disruption. The company wants to measure how quickly systems must be restored, directly aligning with the definition of RTO. Recovery Point Objective (RPO) defines the maximum acceptable data loss, not restoration time. Risk appetite is the level of risk an organization is willing to accept, while risk tolerance is the acceptable deviation from risk appetite. Mean Time Between Failure (MTBF) measures the average time between system failures, not recovery time.