Question
The Chief Executive Officer of an organization recently heard that exploitation of new attacks in the industry was happening approximately 45 days after a patch was released. Which of the following would best protect this organization?
- A. A mean time to remediate of 30 days Correct
- B. A mean time to detect of 45 days
- C. A mean time to respond of 15 days
- D. Third-party application testing
Explanation
If attackers typically exploit a vulnerability about 45 days after the patch is released, the organization is protected when it applies patches faster than that, and a mean time to remediate of 30 days closes the gap before exploitation starts. Mean time to detect and mean time to respond measure how quickly the team notices and reacts to an incident, which only helps after exploitation has begun. Third-party application testing does not shorten patching time.
