When reviewing backup policies, an IS auditor MUST verify that backup intervals of critical systems do not exceed which of the following?

A. Recovery point objective (RPO)
B. Recovery time objective (RTO)
C. Service level objective (SLO)
D. Maximum acceptable outage (MAO)