Mean Time to Detect (MTTD)

MTTD is a measure of how long it takes for an incident to be discovered. Irrespective of whether the incident is a security breach or a hardware failure on the network. The goal is to discover all issues as quickly as possible so that they can be analyzed and remedial actions taken to reduce any outages or risks. The time it takes to detect every issue and incident should be recorded to allow for an accurate average MTTD value to be calculated. This KPI value can be used to determine if processes and procedures are adequate to detect issues quickly enough.