Re: Windows O/S Patching Question

["Sarazen, Daniel" <dsarazen () UMASSP EDU>]

Sorry. I worded that poorly. I wouldn't expect that staff is sitting around waiting for critical patches to install. 
What I would expect is that there's some defined standard, i.e.: "Critical and Important Patches must be reviewed and 
installed within 1 week."

When I was in public accounting we used to ding them if it took more than 2 days, but I'm not certain that's a 
reasonable standard for higher education. 

Thanks,

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Charlie 
Derr
Sent: Friday, March 23, 2012 2:18 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Windows O/S Patching Question

On 03/23/2012 02:04 PM, Sarazen, Daniel wrote:
> Hi All,
>
> Quick Question: If Windows were to release a critical patch for a 
> server today, how long should it take to install the patch before you'd consider it TOO long?
>
> Thanks,
>
> Description: http://media.umassp.edu/pix/mail/umass.gif
>
>       
>
> :: *Daniel Sarazen*, CISSP, CISA
>
> :: Senior Information Technology Auditor
> :: University Internal Audit
> :: University of Massachusetts President's Office

2 1/2 hours?  Is this a trick question? I'm assuming worst case (old underpowered hardware with not enough RAM and a 
fully loaded link because everyone else is trying to download the patch and install it at the same time).  Sure, it
*ought* to take no more than 1/2 hour (at the very most) but this is Microsoft you're talking about after all.

     ~c


--
Charlie Derr
Director of Instructional Technology
Bard College at Simon's Rock