Question

After resolving a series of malware incidents, the information security manager wants to demonstrate to senior management that the incident response process is improving over time. Which metric would BEST support this objective?

Accepted Answer

The trend in mean time to detect and mean time to respond across successive incidents

Answer

The number of malware signatures added to the endpoint protection platform each month

Answer

The total count of alerts generated by the SIEM during the reporting period

Answer

The number of staff who completed incident response awareness training