A security operations center wants to measure how long it takes from when a threat is first observed in the environment to when it is fully remediated. Which metric does this describe?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because MTTR (Mean Time to Respond or Remediate) measures the average time from alert/detection through the full incident response and remediation process to resolution. A is wrong because MTTD measures only the detection phase — how long before the threat is noticed.
Full explanation below image
Full Explanation
B is correct because MTTR (Mean Time to Respond or Remediate) measures the average time from alert/detection through the full incident response and remediation process to resolution. A is wrong because MTTD measures only the detection phase — how long before the threat is noticed. C is wrong because FPR is a detection accuracy metric, not a response time metric. D is wrong because MTBF is a reliability engineering metric for hardware or service uptime, not a security operations metric.