Mean Time to Respond (MTTR)

The average time between incident detection and containment/remediation actions.

Current Value

8.5 hours

-6% from previous period

Industry average: 12.8 hours

Calculation Method

Sum of response times for all incidents / Total number of incidents

Significance

MTTR measures how quickly your team can respond to and contain security incidents after detection. A lower MTTR indicates more efficient incident response processes.

Definition

The average time between incident detection and containment/remediation actions.

Significance

MTTR measures how quickly your team can respond to and contain security incidents after detection. A lower MTTR indicates more efficient incident response processes and capability to limit the impact of security breaches.

Reducing MTTR is crucial for minimizing business disruption and financial losses during security incidents. The faster you can contain and remediate a security incident, the less damage it will cause.

Calculation Method

Sum of response times for all incidents / Total number of incidents

Response time is measured from the moment an incident is detected to the time initial containment actions are completed.

Benchmark

Industry average: 12.8 hours

Related KPIs

Mean Time to Detect
Control Coverage
Incident Resolution