Which of the following BEST measures the efficiency of an incident response process?

The average gap between actual and agreed response times is the best measure of the efficiency of

an incident response process, as it indicates how well the process meets the service level

agreements (SLAs) and the expectations of the stakeholders. A smaller gap means that the process is

more efficient and effective in resolving incidents within the agreed time frame. The other options

are not the best measures of the efficiency of an incident response process, as they do not directly

reflect the performance of the process against the SLAs. The number of incidents escalated to

management may indicate the complexity or severity of the incidents, but not the efficiency of the

process. The average time between changes and updating of escalation matrix may indicate the

agility or flexibility of the process, but not the efficiency of the process. The number of incidents

lacking responses may indicate the capacity or availability of the process, but not the efficiency of the

process. Reference = Top 5 Incident Response Metrics with Real-World Examples &

Impact; Mastering Incident Response: Best Practices for Effective Handling; The Five Steps of Incident

Response