Depending on the experience of your Chief Information Security Officer (CISO), or someone assigned to cybersecurity, it varies between a few hours to a few days.