Free CompTIA CySA+ CS0-003 Practice Question

The correct metric to measure the average time it takes to identify a vulnerability is 'Mean time to detect' (MTTD). This KPI specifically focuses on the detection aspect of vulnerability management, making it a useful indicator of the effectiveness of a program in quickly identifying new vulnerabilities. 'Mean time to respond' (MTTR) measures response time after a vulnerability is detected, 'Mean time to remediate' calculates the time taken to resolve a vulnerability, and 'Alert volume' tracks the number of alerts generated, but none of these uniquely measure detection speed.