Which of the following BEST measures the effectiveness of handling incidents that threaten business operations?

The correct answer is B. Mean time to resolution. Mean time to resolution (MTTR) is a direct, measurable metric that reflects how quickly and effectively incidents are identified, contained, and resolved. A lower MTTR indicates a more capable incident response function. RTOs (A) and maximum allowable downtime (D) are…

Submitted by ngozi_ng· Apr 18, 2026Information Security Incident Management

Question

Options

ARecovery time objectives (RTOs)
BMean time to resolution
CRisk appetite
DMaximum allowable downtime

How the community answered

(40 responses)

A
3% (1)
B
93% (37)
C
5% (2)

Explanation

Mean time to resolution (MTTR) is a direct, measurable metric that reflects how quickly and effectively incidents are identified, contained, and resolved. A lower MTTR indicates a more capable incident response function. RTOs (A) and maximum allowable downtime (D) are predefined targets or thresholds, not measures of actual performance - they tell you what the goal is, not whether you achieved it. Risk appetite (C) is a governance parameter, not a performance metric. MTTR evaluates actual outcomes against the goal of minimizing business disruption.

Topics

#Incident Management#Performance Metrics#Mean Time to Resolution#Effectiveness Measurement

Community Discussion

No community discussion yet for this question.

Full CISM Practice