// GLOSSARY

Time To Report

The time between a simulation message reaching an employee and the first report arriving. In social-engineering measurement the click rate was long treated as the only metric; yet what saves an organization in a real incident is not that no one clicked but how early the defense is told even if someone did. This duration measures exactly that: it shows how many minutes into a real incident the defense could begin to act, and the smaller the number, the closer the human layer comes to an early-warning system. It is independent of whether anyone clicked; a fast report can close an incident before it grows. It is read together with the reporting rate and the correct-escalation percentage, and is one of the decision metrics of the Social Engineering Simulation.