Microsoft patching: Still painful after all these years

We asked readers to tell us if Microsoft's efforts have made the patching process any easier.

By Julie Bort, Network World |  Security, insider, Microsoft 2 comments

The spring of 2011 has seen some of the largest Microsoft Patch Tuesdays ever. In April, Microsoft tied its all-time record with 17 updates that fixed 64 vulnerabilities. In June, the company issued another biggie, with 16 updates that fixed 34 vulnerabilities.

Microsoft knows that patching Windows, Office and its other software is a hardship on its users. The company says it has tried to limit the pain in a number of ways: setting aside a monthly day to issue patches, alternating months in which it issues many patches with months in which it issues fewer patches, and creating a rating system to help IT professionals know which patches to test and install first and which can wait. It issues a heads up on the patches the week prior to Patch Tuesday, too.

Have its efforts made patching systems any easier? We asked readers to tell us. Short answer: no. Readers say patching is a big a drain on resources as always. And this is true even for companies who have invested in third-party patch management tools. On the other hand, this also means that overall patching hasn't gotten worse.

In a short survey of 171 IT professionals, we gleaned how people are handling patching.

The following series of PDFs includes the full survey responses, as well as some cross sections of the responses by company size and other factors.

To continue reading, register here and become an Insider. You'll get free access to premium content from CIO, Computerworld, CSO, InfoWorld, and Network World. See more Insider content or sign in.


Originally published on Network World |  Click here to read the original story.

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question