Mean Time to Detect
Time
Measures the average time taken to detect an incident after it has occurred, indicating the effectiveness of monitoring and alerting systems. A shorter time to detect suggests a more responsive incident detection process.
Formula
(Total Time Taken to Detect All Incidents / Total Number of Incidents)
Example
If it takes 90 minutes to detect 3 incidents, the mean time to detect is 90/3 = 30 minutes per incident.