RPO (Recovery Point Objective) defines how much data loss is acceptable and is measured backwards from the moment of failure. RTO (Recovery Time Objective) defines how long the business can afford to be offline and is measured forward from the failure event. Both must be defined to build a reliable recovery plan.