Windows patch management policy adherence
Windows patch management is more than just a technical matter, it is inclusive of an overall process that needs to be managed from a clerical and policy standpoint. While there are different approaches to accomplishing patch deployment and installation, these methods should be driven by a solid policy that dictates a requirement for the installation of the patches in a timely fashion on all computer systems that are interconnected on a network.
The need for windows patch management is simple: The presence of even a single unpatched device on a network can essentially nullify all the work involved in patching the other systems. One single computer that has allowed the execution of malicious code through the lack of a windows patch management plan can compromise the security of all the other systems on the network. A computer that has been taken control of through a security flaw is an access point for that person to utilize the network credentials of the authenticated session on the victim computer. That enables the party remote controlling the computer to view network resources to the access levels granted to the user logged on to the violated computer.
By strict adherence to a windows patch management policy, such risks can be averted by depriving the opportunity of intrusion from any computer on your corporate network. This stance on windows patch management should be written into official policy and the expectation of adherence should be communicated effectively throughout the organization. Although the IT staff are likely the source to carry this windows patch management policy out, end users are depended on to follow reboot prompts or any other action required on their part to progress the installation of security patches, as well as being expected to report any anomalous behavior either on the system or the windows patch management process itself.
The need for windows patch management is simple: The presence of even a single unpatched device on a network can essentially nullify all the work involved in patching the other systems. One single computer that has allowed the execution of malicious code through the lack of a windows patch management plan can compromise the security of all the other systems on the network. A computer that has been taken control of through a security flaw is an access point for that person to utilize the network credentials of the authenticated session on the victim computer. That enables the party remote controlling the computer to view network resources to the access levels granted to the user logged on to the violated computer.
By strict adherence to a windows patch management policy, such risks can be averted by depriving the opportunity of intrusion from any computer on your corporate network. This stance on windows patch management should be written into official policy and the expectation of adherence should be communicated effectively throughout the organization. Although the IT staff are likely the source to carry this windows patch management policy out, end users are depended on to follow reboot prompts or any other action required on their part to progress the installation of security patches, as well as being expected to report any anomalous behavior either on the system or the windows patch management process itself.
0 nhận xét:
Post a Comment