Security October 30, 2008 9:30 AM

Guide to Patch and Vulnerability Management

Patch management best practices

by Network World Staff

Create an enterprise group responsible for identifying, testing and executing patches. Members should include people from the security team and daily operations. The team should include patches in an overall change-management workflow so that less critical patches will not wait long to be tested and deployed. Such patches will instead be rolled out on a similar schedule as other upgrades, feature changes and the like.
Use a phased approach to applying live patches. First apply them to a small test group of users before a universal patch. When working with the small test group, reboot after each patch, rather than after the entire set of patches, to help identify which patch may be troublesome.
Standardize IT configurations wherever possible. Obviously, though, no one has a completely standardized IT infrastructure. So in your test group for live patches be sure to include a sample for each typical configuration that you will routinely ask the patch management product to update.
Include a measurement phase after each patch is implemented. This should measure current levels of susceptibility to attack, but should also document the time needed for patching and the cost for patching. This will help you make informed future business decisions on the patching process.
Automate the patch management process as much as possible.

Sponsored Resource:Improve your network with the right mix of features, performance and pricing.
Sponsored Resource:Growing your business requires the right tools. Dell's networking servers can help.
Sponsored Resource:Thinking about a new Laptop? Lenovo has models to meet everyone's needs.
Sponsored Resource:Twitter: A how-to guide for using Twitter as a business tool.
Sponsored Resource:Smartphone security threats are on the rise. Is it time to safegaurd your device?

Subscribe to this discussion via email or RSS

Get the latest technology news that's important to you and your business, fresh seven days a week.

BizFeed - December 15, 2009 12:49 PM
Adobe Reader Zero-Day Exploit: Protecting Your PC Adobe has confirmed a zero-day vulnerability being exploited in Adobe Reader and Acrobat. Follow this advice to protect yourself from becoming a victim.
Tech Inciter - December 15, 2009 12:48 PM
Stephen Covey's New Habit Hurts His e-Readers Bestselling business author Stephen R. Covey has made a deal to make electronic versions of his books only available on Amazon's Kindle e-reader.
BizFeed - December 15, 2009 10:56 AM
Supreme Court to Rule on Employee Privacy The Supreme Court has agreed to hear a case involving the expectation of privacy in the workplace. The decision could impact privacy and compliance efforts across the nation.
Tech Inciter - December 15, 2009 10:35 AM
Google Nexus One: Not the Smartphone for Business In all the talk and rumor about the Googlephone there is something I don't see, and that's a great business smartphone.
BizFeed - December 15, 2009 9:19 AM
URL Shortening Frenzy Comes with Security Risks Google and Facebook are jumping into the URL shortening fray, but the explosion of link shortening services comes with some security concerns as well.
Tech Inciter - December 15, 2009 7:23 AM
On Privacy, Google and Facebook Are Much The Same Both companies face privacy challenges and upset users as they try to balance privacy and commercial interest. Who does best?