Which cybersecurity metrics indicate program maturity and how should internal audit use them?

• A. MTTD, MTTR measure detection and resolution speed; dwell time indicates attacker presence; auditors compare against targets, observe trends, and assess data sources.
• B. Only annual incident counts.
• C. Total number of users in the system.
• D. None of the above.

Answer: (A)