New answers tagged

0

I have worked in the IT Audit / IT Security profession for a while now, and I will answer from my professional experience. Is it necessary to have these documents, policies, DRP, BCP's etc built from the scratch to tighten up security to carry the task at hand? The policies you specified in your list are a basic necessity to a well functioning IT ...


0

The patching strategy is part of a risk assessment for a company. Your specific case may range from "never apply security patches" to "apply security patches as soon as they are released". The problem you describe is well known and extremely widespread. Not applying patches (security or others) is explained by various more or less rational reasons (avoiding ...


0

A more rational approach taken in same places, is not to avoid updates altogether, but rather to delay and test before applying. Big organizations like Microsoft, Apple, and Mozilla have put out bad updates in the past rendering devices or software unusable, or unusable behind a proxy/firewall, etc. It can be a good calculated risk to delay an update for a ...



Top 50 recent answers are included