During testing, a risk practitioner finds the IT department's recovery time objective (RTO) for a key system does not align with the enterprise's business conti...