Who would be in the BEST position to determine the recovery point objective (RPO) for business applications? 

Answer options:

A. Business continuity coordinator
B. Chief operations officer (COO)
C. Information security manager
D. Internal audit

B

The recovery point objective (RPO) is the processing checkpoint to which systems are recovered. In addition to data owners, the chief operations officer (COO) is the most knowledgeable person to make this decision. It would be inappropriate for the information security manager or an internal audit to determine the RPO because they are not directly responsible for the data or the operation.