Question

After patching computers with the latest application security patches updates,users are unable to open certain applications.Which of the following will correct the issue? a.Modifying the security policy for patch management tools b.Modify the security policy for HIDS/HIPS c.Modifying security for DLP d.Modifying the security for media control

Answer 1

a)Modifying the security policy for patch management tools

Patch management policy and Procedures

The patch management policy helps take a decision during the cycle. The policy cover clarification about patching strategy, and whether all patches should be automated, manual or default. There has to be a classification based on the seriousness of the security issue followed by the remedy. Patch Management is a set of generalized rules and solutions. The idea is to have a process in place that prevents load and compatibility problems.

The policy applies to all components of the IT infrastructure and includes; Computers, Servers, Software, Routers and switches, Peripherals, Databases and Storage.

Users should be made aware of the policy. Admin and IT staff are responsible to keep the system clean and safe and ensure the patches are updated regularly.

Risks

• Ensure to foresee risks, because without effective patch management chances are there could be unavailable, which can be caused due to viruses and malware exploiting systems or by out of date software making systems unstable.

Procedure

• Set the mode to Automate update of patches or do it manually. The anti-virus and other security components need to be checked and updated to the latest version.
• If the OS is Windows the patch management tools should be set in a way that it automatically downloads the latest Microsoft security patches. The patches will be reviewed and applied as appropriate.
• Periodical reviews on the supplier's website who provides servers, PC's tablets, printers, switches, routers and other peripherals check firmware patches.
• Linux systems should be updated with relevant patches and then tested and implemented accordingly.
• IT Department will be responsible for the approval of all the patches and take ownership of all technical updates starting from operating systems, software, antivirus, servers, workstations, patches, drivers of devices.