BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsidescharm2026//speaker//XTMMBT
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsidescharm2026-MMNUPD@pretalx.com
DTSTART;TZID=EST:20260426T160000
DTEND;TZID=EST:20260426T162000
DESCRIPTION:Teams celebrate when their Mean Time to Remediate (MTTR) drops 
 until it suddenly spikes after fixing old vulnerabilities. That looks like
  failure\, but it’s actually progress and exposure went down. MTTR measu
 res how quickly work closes\, not the health of what remains open. Mean Op
 en Vulnerability Age (MOVA) fills that gap by showing the average age of o
 pen vulnerabilities at a given point in time\, revealing true backlog risk
 . \n\nThis talk defines MTTR and MOVA in clear\, practical terms and walks
  through a simple simulation comparing two common fix strategies: newest-f
 irst and oldest-first. MOVA brings that missing dimension by translating b
 acklog health into data leaders can act on. Attendees will see why MTTR al
 one can mislead\, how MOVA exposes hidden risk\, and how combining both me
 trics gives security teams and leaders a more accurate picture of progress
  and exposure.
DTSTAMP:20260417T061135Z
LOCATION:Track 1
SUMMARY:Why Vulnerability MTTR Alone Misleads: Add MOVA to Measure Real Ris
 k - Caleb Kinney
URL:https://pretalx.com/bsidescharm2026/talk/MMNUPD/
END:VEVENT
END:VCALENDAR