I. Express concerns that on average the duration between the start of a cyber intrusion to the time it was discovered was about 56 days according to Mandiant.
II. Recall that improvement in an organization’s capability to detect intrusions reduces the amount of dwell time and lessens the amount of time needed to recover from it.