A security operations center wants to measure how long it takes from when a threat is first observed in the environment to when it is fully remediated. Which metric does this describe?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — b is correct because MTTR (Mean Time to Respond or Remediate) measures the average time from alert/detection through the full incident response and remediation process to resolution. A is wrong because MTTD measures only the detection phase — how long before the threat is noticed.
Full Explanation
B is correct because MTTR (Mean Time to Respond or Remediate) measures the average time from alert/detection through the full incident response and remediation process to resolution. A is wrong because MTTD measures only the detection phase — how long before the threat is noticed. C is wrong because FPR is a detection accuracy metric, not a response time metric. D is wrong because MTBF is a reliability engineering metric for hardware or service uptime, not a security operations metric.