Chief Information Security Officers (CISOs) were surveyed on their security programs and risk management strategies, including attack response times.
https://www.securitymagazine.com/articles/100085-over-half-of-cisos-measure-security-program-maturity-monthly