Recovery time objectives (RTO) and recovery point objectives (RPO) are measures used to define the acceptable amount of time it takes to recover business operations and the maximum allowable data loss in the event of a disruption. Setting clear RTOs and RPOs is important in scoping a BCP as it helps determine the necessary resources and strategies required to meet these objectives.