Incident Response Life Cycle

Incident Response Timeline

	Detection Occurrence to Discovery	Containment Discovery to Containment	Analysis Time to Complete Forensic Investigation	Notification Discovery to Notification
Median	3 Days	0 Days	24 Days	67 Days
Average All Incidents	63 Days	4 Days	31 Days	83 Days
Average Network Intrusion	39 Days	3 Days	36 Days	80 Days