Risk mitigation velocity

As explained in Data-Driven Cybersecurity

Risk mitigation velocity is the elapsed time required to resolve an identified cybersecurity risk, with lower values indicating faster mitigation.

Risk mitigation velocity (RMV) measures the elapsed time from identifying a cybersecurity risk to resolving it. Lower RMV means faster mitigation, less exposure, and fewer opportunities for attackers to exploit vulnerabilities. section 10.7.1

Calculate RMV by tracking resolution time for identified risks and averaging those durations across comparable vulnerabilities or incidents. Compare results by risk type and over time to assess whether the security response is becoming more effective. section 10.7.1

DataSafe vulnerability example

DataSafe resolves a critical vulnerability in 2 days, a moderate vulnerability in 3 days, and a low-risk vulnerability in 6 days. Its average RMV is (2 + 3 + 6) ÷ 3 = 3.67 days. Reducing this average over time lowers exposure to cyberthreats. section 10.7.1

FinSecure improvement target

FinSecure reduces RMV from 15 hours to 9 hours against a target of 10 hours or less by automating response workflows and training its incident-response team. The improvement helps mitigate risks before escalation. section 10.7.3

Figure 10.6 The left side shows the continuous improvement dashboard before the improvements. The right side shows the dashboard after implementation of the improvements.

Compare the before-and-after dashboard to see how reduced RMV supports continuous improvement alongside mean time to predict. section 10.7.3

How Data-Driven Cybersecurity covers it

How deep it goes

Defines RMV, gives an averaging method, and demonstrates comparison across risk severities and improvement periods.

Examples

Uses DataSafe’s three vulnerability-resolution times and FinSecure’s dashboard comparison from 15 to 9 hours.

What it assumes

Assumes identified risks have recorded discovery and resolution times for calculating comparable averages.

What you can do after

Evaluate security responsiveness, set RMV targets, and prioritize automation or training to shorten risk-resolution time.

How it connects

Connects vulnerability management and incident response with threat prediction, predictive analytics, and continuous improvement.

liveBookmanning.com

Read Data-Driven Cybersecurity on liveBook Get the book at manning.com

Related concepts

• automationuses · Automation is the execution of tasks or processes by machines or software with reduced direct human intervention.
• security posturemeasures · Security posture is the overall security condition of an organization or system, including its controls, vulnerabilities, exposure, readiness, and ability to resist or respond to threats.
• optimizationuses · Optimization is the systematic selection or adjustment of values, actions, or system designs to improve a specified objective, often subject to constraints.
• vulnerabilityuses · A vulnerability is a weakness or susceptibility in a system, process, or person that can expose it to harm, misuse, failure, or compromise.

This explainer was generated by Manning's knowledge graph from the text of Data-Driven Cybersecurity. The section links point to the parts of the book it draws on.