The management team requests monthly KPI reports on the company’s cybersecurity program. Which of the following KPIs would identify how long a security threat g...