Most successful attacks exploit known weaknesses for which updates already exist. Patching is essential, but uncontrolled updates can disrupt work.
A Practical Routine
- Know what you have. An inventory of devices, operating systems and key applications.
- Prioritise. Critical security updates for internet facing systems come first.
- Test. Apply updates to a small group of devices before everyone else.
- Schedule. Agree regular maintenance windows that suit the business.
- Verify. Confirm updates installed and systems work afterwards.
Don’t Forget
- Firewalls, routers and Wi-Fi equipment
- Browsers and common applications
- Servers and virtualisation hosts
- Phones and tablets that access business data
Have a Way Back
Backups and, for servers, snapshots make it possible to roll back quickly if an update causes problems.
Managed services take this burden off your team entirely. Contact me to find out more.