What does the term time of discovery refer to in an incident timeline?

• A. Time of discovery
• B. Incident response time
• C. Resolution time
• D. Escalation time

Answer: (A)

Time of discovery refers to the moment the incident is first detected or reported, serving as the starting point of the incident timeline. It marks when the issue was first noticed, which is used to measure detection speed and anchor all subsequent intervals. The other terms describe later stages: incident response time is how long it takes to begin active response after discovery; resolution time is the total time to fully resolve and recover; escalation time is how long before the issue is escalated to higher authority or specialist teams.