Mean Time to Recover (MTTR)

Security+ 🏆 • Security Operations 🛡️ • Difficulty: premium

Definition

Mean Time to Recover is a metric that measures the average time it takes to restore a service or system to normal operation after a failure or incident. It is used to understand resilience, improve recovery processes, and reduce downtime when something goes wrong.

Examples

  • After a ransomware incident, a team measures how long it took to rebuild systems and restore critical services from backups.
  • An operations team tracks MTTR for failed web services to see whether monitoring and response improvements are reducing downtime.

Discover 🔎

Some metrics tell you how often systems fail. Mean Time to Recover tells you what happens next. It measures how quickly a team can get back to normal after a disruption.

This matters because outages and incidents are not judged only by the fact that they happened. They are also judged by how long the business was affected. A short disruption can be manageable. A long one can become expensive, damaging, and highly visible.

Remember: MTTR is about recovery speed. It answers the question, “Once something breaks, how long do we stay affected?”
Open the interactive lesson Browse more topics

Tip: The interactive version includes progress tracking, decks, and premium deep dives.