28. An organization has tracked several incidents that are listed in the following table.Which of the following is the organization's MTTD?The organization has tracked several incidents with the following details: one incident started at 7:20 a.m. and was detected at 10:30 a.m. with a time elapsed of 180 minutes, another incident started at 12:00 a.m. and was detected at 2:30 a.m. with a time elapsed of 150 minutes, another incident started at 9:25 a.m. and was detected at 12:15 p.m. with a time elapsed of 170 minutes, and another incident started at 3:25 p.m. and was detected at 5:45 p.m. with a time elapsed of 140 minutes.
Answer: C
The organization's MTTD is 160 minutes.
To determine the Mean Time to Detect (MTTD), we need to calculate the detection times for each incident and then find the average. The organization recorded four incidents with detection times of 180, 150, 170, and 140 minutes, resulting in an MTTD of 160 minutes.
A) 140
Option A is incorrect because 140 minutes is the detection time for one specific incident, but it does not represent the average detection time across all incidents. To find MTTD, all incident detection times must be averaged, which does not yield 140.
B) 150
Option B is incorrect as 150 minutes corresponds to the detection time of a single incident. While it is a valid detection time, it does not reflect the average of all incidents, which is necessary to determine MTTD.
C) 160
Option C is correct as it represents the average detection time calculated from all incidents. By adding the detection times (180 + 150 + 170 + 140 = 640 minutes) and dividing by the number of incidents (4), the MTTD is 160 minutes.
D) 180
Option D is incorrect because 180 minutes is the detection time for one incident but does not represent the average of all incident detection times. MTTD requires the average, not just the maximum detection time.
Conclusion
The correct answer is 160 minutes, as it accurately reflects the average time taken to detect incidents across the organization. All other options represent specific detection times rather than the mean, thus failing to provide the appropriate measure of MTTD.