Mobile adaptive security systems - why a patch in time saves both money and effort

摘要

A common criticism of many operating system suppliers and their history of patching is either that the patches themselves cause new problems, or that they are not developed and released quickly enough to address a known exploit. There is little we can do to change the latter, but we can and do implement our own stringent tests and controls around applying new patches to production systems, and this goes some way to addressing the former. The problems associated with not applying a patch can be significant, and equally so are the risks of actually applying the patch without testing it. Combine this conundrum with the pain of preparing and managing test systems, developing a back-out plan and managing the expectations of our user base and we have a major headache for most large organisations today.