Recovery Time Objective (RTO)defines themaximum acceptable downtimebefore business operationsmust be restored. It helps organizations set expectations for recovery speed and prioritize system restoration accordingly. A (likelihood of an incident and cost)relates to risk assessment, not RTO. B (roles and responsibilities)falls underincident response planning, not RTO. C (state of restored systems)is covered byRecovery Point Objective (RPO), not RTO. Reference:CompTIA Security+ SY0-701 Official Study Guide, Security Program Management and Oversight domain.