Professional Documents
Culture Documents
Developing Patch Management Best Practices: An In-Depth Technical Webcast
Developing Patch Management Best Practices: An In-Depth Technical Webcast
Management
Best Practices
An In-Depth Technical Webcast
Today’s Agenda
Introduction
Q&A
Today’s Panelists
3
Why Is Patch Management Important
Sources of Endpoint Risk
5%
Zero-Days
30%
Missing Patches
65%
Misconfigurations
AV
Device
Control
Application
Control
Patch & Configuration
Management
4
Benefits of a Solid Patching Process
Malware Costs Money Patching Reduces Target Size
5
Patch Management Best Practices
Laying the
Groundwork
Patch
After Patch Before Patch
Management
Tuesday Tuesday
Process
On Patch
Tuesday
6
Laying the Groundwork
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Discover Assets
8
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Agent Maintenance
Lumension Reporting Services (LRS)
9
Laying the Groundwork | Week Before | Patch Tuesday | Week After
10
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Groups
11
Laying the Groundwork | Week Before | Patch Tuesday | Week After
12
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Staff Training
Learning Portals
13
Before Patch Tuesday
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Prepare Resources
• Schedule Resources
» Allocate IT resources for Patch Tuesday while also integrating additional patch
release schedules from third-party applications, such as Adobe, Apple (ad
hoc), Java and so forth
» Review the patching needs of any internally-developed applications and/or
custom patches and consider deploying these patches as part of the monthly
patch cycle
15
Laying the Groundwork | Week Before | Patch Tuesday | Week After
16
Laying the Groundwork | Week Before | Patch Tuesday | Week After
17
Laying the Groundwork | Week Before | Patch Tuesday | Week After
18
On Patch Tuesday
Laying the Groundwork | Week Before | Patch Tuesday | Week After
20
Laying the Groundwork | Week Before | Patch Tuesday | Week After
21
Laying the Groundwork | Week Before | Patch Tuesday | Week After
22
After Patch Tuesday
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Deployment History
24
Laying the Groundwork | Week Before | Patch Tuesday | Week After
25
Laying the Groundwork | Week Before | Patch Tuesday | Week After
26
Laying the Groundwork | Week Before | Patch Tuesday | Week After
Continuous Improvement
• Checks and Balances
» Review the Effectiveness of Patch Tuesday Remediations
• Metrics Improvement
» Modify system settings, distribution parameters and so forth to further optimize
the system for next month’s updates
» WAN optimization, polling frequency and minimizing the patches being
detected can all help further optimize performance
» Look for computers that did not receive updates at all or those that took
unusually long to receive updates
27
Q&A
More Information
• Free Vulnerability Scanner Tool • Get a Quote (and more)
» Discover all OS and application vulnerabilities http://www.lumension.com/
on your network vulnerability-management/
http://www.lumension.com/Resources/ patch-management-software/buy-now.aspx#6
Security-Tools/Vulnerability-Scanner.aspx
29
Global Headquarters
8660 East Hartford Drive
Suite 300
Scottsdale, AZ 85255
1.888.725.7828
info@lumension.com
http://blog.lumension.com