Mean Time to Respond

Noun · Security & Infosec

Definitions

  1. A metric measuring how long it takes an organization to begin and execute meaningful response actions after an incident is detected. Mean time to respond captures operational readiness beyond simple alerting, including triage, ownership, and decision speed.

    In plain English: The average time it takes to act after an incident is detected.

    Example: "The tooling was good, but mean time to respond stayed high because after-hours approval chains were too slow."

Related Terms