Effective Patch Management Strategies A panel discussion Lawrence Walsh, executive editor Information Security magazine

What is patch management? Patch management is the proactive, measured response to known vulnerability exposures and risks.

Patch Management Agenda What is a security patch? Prioritizing Patching Need for Testing Inventory Control Standardization v. Diversity Re-architecting Networks Separation of Duties

What is a Security Patch? Is there a difference between a security patch and a functionality patch? And should we care?

Prioritizing Patching Can you trust how vendors rate the criticality of patches? How do you assign criticality ratings in your own environment?

Need for Testing Do we rush to patch or should we hold off and leave systems exposed while we test? Can an enterprises effectively test patches?

Inventory Control Why keep accurate inventory? Methods for inventory control? Consequences for poor inventory control?

Wash, Rinse, Repeat Deploy Validation Reporting No Patch Available, Machines Remain Vulnerable (Unsupported implementations)

Separation of Duties Who should lead patching efforts Why is there a need for separation of duties

Re-architecting Networks Does re-architecting reduce the need for patching? What are the pitfalls of re-architecting? Is it worth the cost? Are new chokepoint solutions effective?

Thank you. Questions, comments? These panelists will not be available at the Ask-the-Experts booth in the Exhibit Hall. Please send questions to lwalsh@techtarget.com.