OIT Home > About OIT > Information Resource Standards > Patch Management Standard
Patch Management Standard
This standard describes general principles addressing the appropriate testing and installation of operating system patches. ISA’s, ITA’s and others who manage servers and workstations are responsible for the maintenance of security patching on those computers. Microsoft, Apple and most other workstation and desktop operating system vendors routinely issue software updates. Security updates published by operating system vendors must be deployed within 30 days of their release if published within the vendor’s patch release cycle, and within 15 days if published via an out-of-cycle update. If the patch addresses a critical time-sensitive issue, OIT will notify the departmental IT staff to install the patch immediately. OIT will install the updates to the servers and workstations it manages. Departmental IT staff and end users are responsible for installing the updates to their computers. A period for testing is recommended for any patches received; pertinent procedures and guidelines can be found on the Information Security Website. This standard is closely related to the Configuration and Assets Management Standard. |
||||||||||||||||||||||||||||||||||||||||||||
Effective Date:May 1, 2011 Compliance Date:June 30, 2011 Last Revision:March 30, 2011 |
||||||||||||||||||||||||||||||||||||||||||||
|
Tools