cisco courses ccna

cisco courses ccna.issue.(system upgrade). PCIDSS is not only interested in patch managementPatch management is hardwired into several compliance frameworks (for example, itself(Requirements are set forth, and a timeframe for installing the patch to close the vulnerability is also specified.) O The patch installation process consists of the following steps.Step 1. Identify the system (on which the patch should be installed). Determine where the patch should be applied. Let's say a new vulnerability is released by the vendor as a result of a vulnerability assessment and a patch needs to be installed. It is important to rely on the asset inventory and configuration record database to correctly identify systems that are running the version of software that should be patched. Additional methods for identifying systems (that should be patched) are described later in this section.Prioritize the systems that need to be patched. Installing patches or system updates is not a simple task and requires the mobilization of many of the unit's resources. When a new patch is released, it may be necessary for several systems to be installed, but not all systems need to be installed immediately. Let's say that some systems need to be patched immediately because they perform critical tasks or are highly vulnerable to the vulnerabilities filled by the patch. While others284 Chapter 5 Introduction to Security Operations and Maintenance Managementsystems may also need to be patched, but are not in immediate danger.Step 3. assess the response. When a patching request has not yet gone through the change management process (for example, when the patch is still being "qualified" in the test environment), other remedial controls may be implemented in some cases. If necessary, interim solutions (rather than direct patching) can be implemented based on the system owner's judgment and risk profile.Step 4. Open the change process. Submit a change request to formally open the change process and request the patch installation process. After this, the patch installation process will follow the steps defined by the change management process, as follows.