Surviving Insecure IT: Effective Patch Management

Published

March 21, 2009

Author(s)

Simon Liu, D. Richard Kuhn, Hart Rossman

Abstract

The amount of time to protect enterprise systems against potential vulnerability continues to shrink. Enterprises need an effective patch management mechanism to survive the insecure IT environment. Effective patch management is a systematic and repeatable patch distribution process which includes establishing timely and practical alerts, receiving notification of patches or discovering them, downloading patches and documentation, assessing and prioritizing vulnerabilities, performing testing, deploying patches, and auditing.

Citation

IT Professional (IEEE)

Volume

11

Issue

2

Pub Type

Journals

Download Paper

https://doi.org/10.1109/MITP.2009.38

Local Download

Keywords

IT Professional, patch management, security, vulnerability, vulnerability alerts, vulnerability assessment, vulnerability scan

Citation

Liu, S. , Kuhn, D. and Rossman, H. (2009), Surviving Insecure IT: Effective Patch Management, IT Professional (IEEE), [online], https://doi.org/10.1109/MITP.2009.38, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=901613 (Accessed October 19, 2025)