An organization determines that its e-commerce application can tolerate a maximum of 4 hours of downtime before causing significant business impact.
In the event of a disaster, the business can accept losing up to 1 hour of transaction data.
Which of the following correctly identifies the organization's requirements?