“197 days: The average length of time it takes for organisations to identify a data breach”1
This statistic – mean–time–to-detection (MTTD) – comes up every year. 197 days is the 2018 figure, but it’s always quite big. It is marginally up on the previous year, up from 191 days. This begs two questions: why does it take so long to identify breaches, and are we even identifying all of them?
