AWS whitepapers documentation change
Summary
Removed entire section covering definition, significance, and operational guidance for mean time to detect metric
Security assessment
Content removal lacks evidence of security incident remediation. The documentation described standard security operations concepts without referencing specific vulnerabilities or security patches.
Diff
diff --git a/whitepapers/latest/aws-security-incident-response-guide/mean-time-to-detect.md b/whitepapers/latest/aws-security-incident-response-guide/mean-time-to-detect.md index 3f26cb5f0..8b1378917 100644 --- a//whitepapers/latest/aws-security-incident-response-guide/mean-time-to-detect.md +++ b//whitepapers/latest/aws-security-incident-response-guide/mean-time-to-detect.md @@ -1 +0,0 @@ -[View a markdown version of this page](mean-time-to-detect.md) @@ -3,33 +1,0 @@ -[](/pdfs/security-ir/latest/userguide/sir-ug.pdf#mean-time-to-detect "Open PDF") - -[Documentation](/index.html)[Security Incident Response](/security-ir/index.html)[](what-is.html) - -# Mean time to detect - -_Mean time to detect_ is the average time it takes to discover a possible security incident. Specifically, this is the time between the occurrence of the first indicator of compromise and the initial identification or alert. - -You can use this metric to track how effective your detection and alerting systems are performing. Effective detection and alerting mechanisms are key to verifying that possible security incidents don’t linger within your environments. - -The higher the mean time to detect, the greater the need to build additional or more effective alerts and mechanisms to identify and discover possible security incidents. The lower the mean time to detect, the better your detection and alerting mechanisms are functioning. - - **Javascript is disabled or is unavailable in your browser.** - -To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions. - -[Document Conventions](/general/latest/gr/docconventions.html) - -Establish metrics for success - -Mean time to acknowledge - -Did this page help you? - Yes - -Thanks for letting us know we're doing a good job! - -If you've got a moment, please tell us what we did right so we can do more of it. - -Did this page help you? - No - -Thanks for letting us know this page needs work. We're sorry we let you down. - -If you've got a moment, please tell us how we can make the documentation better.