Effective%20Patch%20Management%20Strategies

1
Effective Patch Management Strategies

• A panel discussion
• Lawrence Walsh, executive editor
• Information Security magazine

2
What is patch management?

• Patch management is the proactive, measured
  response to known vulnerability exposures and
  risks.

3
Patch Management Agenda

• What is a security patch?
• Prioritizing Patching
• Need for Testing
• Inventory Control
• Standardization v. Diversity
• Re-architecting Networks
• Separation of Duties

4
What is a Security Patch?

• Is there a difference between a security patch
  and a functionality patch? And should we care?

5
Prioritizing Patching

• Can you trust how vendors rate the criticality of
  patches?
• How do you assign criticality ratings in your own
  environment?

6
Need for Testing

• Do we rush to patch or should we hold off and
  leave systems exposed while we test?
• Can an enterprises effectively test patches?

7
Inventory Control

• Why keep accurate inventory?
• Methods for inventory control?
• Consequences for poor inventory control?

8
Wash, Rinse, Repeat

• Deploy
• Validation
• Reporting
• No Patch Available, Machines Remain Vulnerable
  (Unsupported implementations)

9
Separation of Duties

• Who should lead patching efforts
• Why is there a need for separation of duties

10
Re-architecting Networks

• Does re-architecting reduce the need for
  patching?
• What are the pitfalls of re-architecting?
• Is it worth the cost?
• Are new chokepoint solutions effective?

11
Thank you.Questions, comments?

• These panelists will not be available at the
  Ask-the-Experts booth in the Exhibit
  Hall.Please send questions to lwalsh_at_techtarget.c
  om.