CYBERSECURITY GLOSSARY Malware and viruses CYBERSECURITY GLOSSARY Attacks and techniques CYBERSECURITY GLOSSARY Detection and response CYBERSECURITY GLOSSARY Identity and access CYBERSECURITY GLOSSARY Cloud and infrastructure CYBERSECURITY GLOSSARY Compliance and management CYBERSECURITY GLOSSARY Continuity and metrics CYBERSECURITY GLOSSARY Privacy and OSINT CYBERSECURITY GLOSSARY Cybersecurity
← Back to the glossary Cybersecurity glossary · Continuity and metrics

MTTD, MTTA and MTTR

MTTD, MTTA and MTTR are the three core incident response metrics. MTTD is the mean time to detect a problem; MTTA, the mean time until someone acknowledges it and starts working on it; MTTR, the mean time to resolve it. The lower they are, the less impact each incident has.

How TecnetOne handles it: TecnetSOC

mean time to detect, mean time to acknowledge, mean time to resolve, incident metrics

Related terms

RTO and RPO

RTO and RPO are the two numbers that define a recovery plan. RTO (recovery time objective) is the maximum time a system can be down before it hurts the business. RPO (recovery point objective) is the maximum amount of data you accept losing, measured in time since the last copy.

View term →
See all glossary terms →

Ready to put this into practice in your operation?

Tell us what you need and a TecnetOne engineer will get back to you.

Talk to an engineer