An organization has determined it can tolerate a maximum of three hours of downtime. Which of the following has been specified?