Free Engineering Workbench calculator — live below, no login
Mean time to contain Calculator
Measure the time from detecting a security incident to containing it.
Cybersecurity & cyber assuranceHow it's worked out
- MTTC = Σ (containment − detection) ÷ incidents
- Containment = attacker can no longer spread or act
NoteThe mean is pulled by a few long incidents; report the median and the 90th percentile alongside it.
Source: NIST SP 800-61 (incident handling); IBM Cost of a Data Breach (containment lifecycle)
Need help acting on this number?
VVnT SeQuor's Cybersecurity & Cyber Assurance practice helps teams turn this metric into a plan.