Looking for help in setting my organization's patch policy (medium size
retail business). I have more than enough recommendations and theory.
I am hoping for real world responses to these questions. How often do
you actually apply Microsoft rated critical security updates?
Apply all day of release?
Apply all within a week?
Apply all within 30 days?
Apply all greater than 30 days?
Analyze all and only apply those rated extreme by my organization,
leave others for normal maintenance cycle?
Separate answers for servers and workstations if you handle them
differently.
Many thanks for any input
--
Security Tech
|