Cybersecurity definition
What is MTTD / MTTR?
MTTD / MTTR stands for Mean Time to Detect / Mean Time to Respond.
By Cyber Tool Stack Editorial TeamUpdated
Definition
Two core SOC performance metrics: MTTD measures how long it takes to notice something malicious happened, and MTTR measures how long it then takes to contain and resolve it, together showing whether a security program is getting faster over time.
Where MTTD / MTTR fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
Dwell TimeThe length of time an attacker is present inside an environment before being detected — a key metric for measuring how well detection capabilities are actually working, since a longer dwell time generally means more damage done.SOCSecurity Operations CenterThe team (in-house or vendor-run) responsible for monitoring security alerts around the clock and responding when something looks like a real incident.