Re: Windows O/S Patching Question

[Roger A Safian <r-safian () NORTHWESTERN EDU>]

No more than 48 hours...less time if there is an active exploit and no reasonable means to mitigate the attack.

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Sarazen, 
Daniel
Sent: Friday, March 23, 2012 1:05 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Windows O/S Patching Question

Hi All,

Quick Question: If Windows were to release a critical patch for a server today, how long should it take to install the 
patch before you'd consider it TOO long?

Thanks,

[Description: http://media.umassp.edu/pix/mail/umass.gif]

:: Daniel Sarazen, CISSP, CISA
:: Senior Information Technology Auditor
:: University Internal Audit
:: University of Massachusetts President's Office

:: 774-455-7558
:: 781-724-3377 Cell
:: 774-455-7550 Fax
:: Dsarazen () umassp edu<mailto:Dsarazen () umassp edu>

University of Massachusetts : 333 South St. : Suite 450 : Shrewsbury, MA 01545 : 
www.massachusetts.edu<http://www.massachusetts.edu/>


Confidentiality Note:  This email is intended for the exclusive use of the addressee(s) and may contain proprietary, 
confidential or privileged information.  If you are not the intended recipient(s), any dissemination, use, distribution 
or copying is strictly prohibited.