While it is important to detect vulnerabilities quickly, it is equally important to fix or mitigate the identified vulnerabilities quickly. The more the time a vulnerability is open, the more exposure it gives an attacker to exploit. Mean time to resolve is the metric that takes into consideration the average time interval taken to remediate any given vulnerability following its identification. Data for this metric can be published and compared on a quarterly basis, with the value for every quarter ideally lesser than the previous one.