Ensure that there are set steps, within a predetermined time line (such t ime line to be developed in the light of a process-level risk assessment), for identifying the risks of proceeding and of not proceeding with any given patch, for deciding what steps should be taken and for implementing that decision – which should usually be to install the patch unless there are good reasons not to. Identify, for each of the software and other technology items, the relevant source of information about vulnerability identification (possibly through Bugtraq or CVE) and patch release (usually the vendor website, or through use of an appropriately configured automatic update facility), and this information s hould be regularly reviewed and, where necessary, updated. There should be absolute clarity about accountability, and individual responsibilities should be clearly written into job descriptions. Define roles and res ponsibilities with respect to vulnerability management, including monitoring and identifying (for all of the software and hardware) the vulnerabilities and release of patches, risk assessment, identifying the urgency with which the patch needs to be deployed, carrying out the actual update (refer to control A.12.5.1) and dealing with any coordination. The SANS Top 20 are, by consensus, the most common and most ofte n exploited vulnerabilities. 2 3 4 5 6 7 8 9 10 Prioritize high-risk vulne rability. Patch Management is available with Professional licenses.įor the full story, see What is Patch Management? and the Patch Management Engine.1 Prioritize high-risk systems. N-able N-central Patch Management uses rules, caching, multiple maintenance windows and automated approval methods to enable you to automate the patching of devices under your management. The Patch Management module in N-able N-central provides the capability to effectively manage the downloading and installation of Microsoft and third party software patches across your customers' networks.
Patch Management Patch patch manager patch management windows patch patching patch maintenance
0 kommentar(er)
