Mean Time to Detect (MTTD)

Mean Time to Detect, or MTTD, is a metric used in IT service management, IT monitoring and cybersecurity. It measures the average time between the occurrence of a fault, disruption or security incident and its detection by an organisation. A lower MTTD indicates that potential issues are being identified more quickly. Technologies such as automated monitoring, SIEM platforms, Endpoint Detection and Response, and centralised log analysis can help reduce detection times. The metric is often evaluated alongside other measures such as Mean Time to Respond and Mean Time to Repair. MTTD helps IT and security teams assess the effectiveness of their monitoring and detection processes and identify opportunities for improvement.