Mean Time to Respond (MTTR)
Mean Time to Respond (MTTR) is a security metric that measures the average time between detecting a security incident and containing or resolving it. A lower MTTR means your organization responds to threats faster, limiting the impact and reducing recovery costs.
Improving MTTR requires documented response procedures, trained response teams, appropriate response tools, and regular practice through tabletop exercises and drills. Automation can also reduce response times for common incident types.
Why It Matters
CMMC's incident response requirements exist to ensure your organization can respond effectively when incidents occur. Tracking MTTR provides a concrete measure of your incident response capability and helps you identify where your response process needs improvement.