Help me vet this process!

Information Security
1

Working on a process to analyze software updates from vendors and then decide how quickly to push to customers/videos, etc… here’s where I’m at but I want you all to beat this up and help me think through it:

  1. Update is released and we get the notification
    1.a - Update is a security updated that’s needed. Push to our test equipment right away and monitor for issues so we can release to customers the follow day.
    1.b - Does the update have new features? Are these features that actually benefit us? If not – and there are no security implications – how long do we wait to upgrade?
  2. After the update – are there user interface changes and process changes the clients need to know about? Does it EoL any hardware?

All input is welcomed here.

2

Add to 1-a to backup config first.

Somewhere add or testing rolling back the update.

1 Like