Lowering of time to detect/respond/restore

Time to Detect, Time to Respond, False Positive Reporting Rate (validating that threats they are detecting are real threats) and Time to Restore can be seen as logical methods, albeit rather technical, which is often difficult for executive management to comprehend and can end up being undersold on their real value for making effective improvements. These are key values for assessing resilience, and natural metaphors may be helpful.