Sharing is Caring

Enterprise Patch Management: How To Go About It

Patch management is related to vulnerability management. Vulnerabilities frequently appear in critical client, server, and networking device operating systems and firmware. Application software, especially internet applications and frameworks like Acrobat, Flash, and Java, is also frequently discovered to have vulnerabilities.

Patch management involves all aspects of software patching, including identifying required patches, acquiring, distributing, installing, and verifying that the patch is installed on all required systems.

Installing patches is frequently the most effective way to mitigate software vulnerabilities. Sometimes, they are the only way to do so.

Patch management is required by some compliance regulations, such as Sarbanes Oxley (SOX) and the Health Insurance Portability and Accountability Act (HIPAA). Failure to implement patches in a systematic and timely manner could result in audit failure and penalties for non-compliance.

Patch management depends on asset management data to identify systems that are running software that requires patching. Patch management software is available from companies such as SolarWinds and LANDesk.

Microsoft System Center Configuration Manager (SCCM) is an enterprise-level tool for the automated distribution of patches to a large number of Microsoft Windows workstations and servers.

Image is a screenshot of the SolarWinds Patch Manager summary screen. Shown in the screenshot are a list of Nodes Managed by WSUS Servers, a pie chart showing the Operating System Overview, by vendor and type, a pie chart showing an overview of Desktop Note Health, a list of all patches available grouped by company titles and severity. A pie chart showing the Top Ten Patches Missing, with a list of the patch names and the number of nodes missing the updates.

Patch Management Techniques

This requires a software agent to be running on each host to be patched. The agent reports whether vulnerable software is installed on the host.

The agent communicates with the patch management server, determines if patches exist that require installation, and installs the patches. The agent runs with sufficient privileges to allow it to install the patches. Agent-based approaches are the preferred means of patching mobile devices.

Action Point

PS: I know you might agree with some of the points raised in this article or disagree with some of the issues raised.

Please share your thoughts on the topic discussed. We would appreciate it if you could drop your comment. Thanks in anticipation.

Sharing is Caring

X (Twitter)Facebook Pinterest WhatsApp

Comments

3 responses to “Enterprise Patch Management: How To Go About It”

Health

October 27, 2023

Great content! Super high-quality! Keep it up!

Haircuts

October 30, 2023

Sustain the excellent work and producing in the group!

1. Adeniyi Salau
  
  October 30, 2023
  
  Thank you.

Enterprise Patch Management: How To Go About It

Sharing is Caring