210-250 · Question #79
Which of the following are metrics that can measure the effectiveness of a runbook?
The correct answer is D. All of the above. MTTR, MTBF, and mean time to discover a security incident are all valid metrics for evaluating runbook effectiveness across resolution speed, system reliability, and detection efficiency.
Question
Which of the following are metrics that can measure the effectiveness of a runbook?
Options
- AMean time to repair (MTTR)
- BMean time between failures (MTBF)
- CMean time to discover a security incident
- DAll of the above
How the community answered
(21 responses)- A10% (2)
- C5% (1)
- D86% (18)
Why each option
MTTR, MTBF, and mean time to discover a security incident are all valid metrics for evaluating runbook effectiveness across resolution speed, system reliability, and detection efficiency.
MTTR alone is a valid runbook metric but selecting only A excludes MTBF and mean time to discover, which are equally relevant measures of runbook effectiveness.
MTBF alone is a valid runbook metric but selecting only B excludes MTTR and mean time to discover, which are equally relevant measures of runbook effectiveness.
Mean time to discover alone is a valid runbook metric but selecting only C excludes MTTR and MTBF, which are equally relevant measures of runbook effectiveness.
MTTR measures how quickly a runbook guides responders to resolve an incident, directly reflecting its procedural efficiency. MTBF indicates whether runbook-driven corrective actions reduce failure recurrence over time, and mean time to discover measures how effectively the runbook's detection steps identify incidents. Together, these three metrics span the full incident lifecycle and provide a comprehensive view of runbook performance.
Concept tested: Runbook effectiveness metrics in incident response
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
Topics
Community Discussion
No community discussion yet for this question.