There are no industry-standard approaches to measuring cybersecurity performance. Your MTTD is the average time it takes to discover a security threat or incident. Your MTTR measures the time it’s taken to control and remediate a threat. The more educated the entire company becomes about cybersecurity, the more prepared it will be to prevent and respond to attacks. Cybersecurity isn t simply an IT issue, it s people are frequently the weakest link, and it’s an ongoing process rather than one and done.
Source: https://threatpost.com/mttd-and-mttr-two-metrics-to-improve-your-cybersecurity/152149/