1. Software Engineering
  2. Incident & Response

Mean Time to Detect


Measures the average time taken to detect an incident after it has occurred, indicating the effectiveness of monitoring and alerting systems. A shorter time to detect suggests a more responsive incident detection process.


(Total Time Taken to Detect All Incidents / Total Number of Incidents)


If it takes 90 minutes to detect 3 incidents, the mean time to detect is 90/3 = 30 minutes per incident.