'Oh... that security patch'

摘要

Too many of my client organizations find themselves in a quandary. Patching systems can be incredibly time-consuming and affect the stability of critical hosts. But not patching these systems can leave the critical hosts in a state ripe for compromise. While most organizations develop a strategy for applying security patches, there are often long periods where these critical hosts are not protected against security flaws. This may be due to scheduling or, more commonly, poor management processes that allow patches to be missed or 'broken.'