Recovery Time Calculator
Build an end-to-end RTO from detection, decision, mobilisation, restore throughput, validation and cutover for a tiered estate.
Inputs
Achievable RTO
11.67hours
Time Before Restore Starts
4.50hours
Data Movement Time
1.90hours
System Configuration Time
2.78hours
Share Spent Before Recovery Begins
38.5%
Largest Phase
Detection and decision
Fastest Improvement
Pre-authorise the disaster declaration — the delay is human, not technical
Step by step
Values used
Detection time = 2 hours; Declaration and decision time = 1.50 hours; Team mobilisation = 1 hours; Tier-1 data to recover = 8,000 GB; Aggregate restore throughput = 1,200 MB/s; Systems to recover in tier 1 = 25 systems; Configuration work per system = 20 minutes; Teams working in parallel = 3 teams; Application validation and cutover = 2.50 hours
Recovery Time
RTO = detection + declaration + mobilisation + (dataVolume ÷ restoreThroughput) + (systems × configMinutes ÷ parallelTeams) + validation.
Achievable RTO
= 11.67 hours
Time Before Restore Starts
= 4.50 hours
Data Movement Time
= 1.90 hours
System Configuration Time
= 2.78 hours
Share Spent Before Recovery Begins
= 38.5
Largest Phase
= Detection and decision
How it works
An achievable RTO is the sum of six phases, and only one of them is copying data. Detection, the decision to declare a disaster and getting people into a bridge routinely consume the first several hours; per-system configuration scales down with parallel teams but never to zero; and validation before cutover is what stops you failing over to a broken environment. Naming the largest phase tells you where to spend money — replication does nothing for an RTO dominated by a four-hour argument about whether to declare a disaster.
Formula
Recovery Time
RTO = detection + declaration + mobilisation + (dataVolume ÷ restoreThroughput) + (systems × configMinutes ÷ parallelTeams) + validation.
- detection
- Time from compromise or failure to someone knowing
- declaration
- Time to authorise invoking the recovery plan
- configMinutes
- Hands-on configuration per recovered system
- validation
- Application testing and traffic cutover
Frequently Asked Questions
How is Recovery Time calculated?
RTO = detection + declaration + mobilisation + (dataVolume ÷ restoreThroughput) + (systems × configMinutes ÷ parallelTeams) + validation. An achievable RTO is the sum of six phases, and only one of them is copying data. Detection, the decision to declare a disaster and getting people into a bridge routinely consume the first several hours; per-system configuration scales down with parallel teams but never to zero; and validation before cutover is what stops you failing over to a broken environment.
Why does Recovery Time matter?
Naming the largest phase tells you where to spend money — replication does nothing for an RTO dominated by a four-hour argument about whether to declare a disaster.
What values do I need to enter?
This calculator takes 9 inputs: Detection time, Declaration and decision time, Team mobilisation, Tier-1 data to recover, Aggregate restore throughput, Systems to recover in tier 1, Configuration work per system, Teams working in parallel, Application validation and cutover. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.
Why include detection time in the RTO?
Because the business experiences the outage from the moment service degrades, not from the moment IT starts restoring. Excluding detection is how a plan claims a four-hour RTO for an incident that took nine hours to resolve.
How does this differ from the backup recovery calculator?
That one sizes the restore itself — chain length, streams, verification. This one wraps the whole incident: the human phases either side, per-system rebuild work and cutover. Use both: the restore figure feeds the data-movement phase here.
You might also need
- Backup Recovery CalculatorCommonly used together
- Ransomware Impact CalculatorCommonly used together
- Blue Team Readiness CalculatorCommonly used together
- Disaster Recovery RTO CalculatorSimilar topic
- Quantum Threat Readiness CalculatorAlso in Forensics & Emerging Threats
- Enterprise Cybersecurity Health Score CalculatorAlso in Forensics & Emerging Threats