Targets vary by provider and contract, so ask each vendor for response times per severity tier. Among Exaforce customers, Lumilens achieved a 6-minute blended mean time to investigate (MTTI) for P0 and P1 findings. Ask for real outcomes as well as contractual maximums, since the two can differ widely.
Back to Managed detection and response (MDR)
What is the SLA response time for P1, P2, and P3 incidents?
A quick answer to a common question about managed detection and response (MDR).