Whenever a new vulnerability is announced, the clock starts. The time it takes to patch can mean the difference between your site getting compromised or not.

Tracking this as a "time to patch" metric can help you quantify if you need more help with your security program - or are attending to serious issues faster than the attackers can target your sites.