MTTR encompasses the entire time from detection to full restoration, which includes not only the time to apply a patch but also any other remediation activities required to resolve a vulnerability or incident. Therefore, it is not limited solely to patch application time.