I spotted an analysis of Patching and Remediation Performance metrics that I wanted to share.
Mean time to remediate (MTTR) is the typical statistic CISOs review around patching. MTTR covers the average time it takes to get a patch into production after it is announced. It provides an overall measure of how quickly you can implement changes. Mean Time to Communicate is a new metric. It looks at how quickly the security organization can collaborate with other departments or teams involved in running IT operations or implementing updates. Mean Time to Prioritize (MTTP) tracks your ability to understand the assets in your IT estate — deployed applications, services, and infrastructure — and map them against new issues and their severity.
These metrics help identify risks, prioritize fixes, and improve team collaboration.
With all the talk of patch management, I admit I’d never seen these stats before. You’re welcome to tell me you already had, even if you didn’t. I’ll take the loss on this one.
atchJust a thought – do any patch tools calculate this? If they do, I’d love to hear about it.
This content is made possible by community-minded viewers like you
Thank you
Join the Small Biz Thoughts Community