Send customers a weekly list of devices that miss the seven-day patch target
TSK-0256
-
Last updated
Open
Owner
Gerrit SmeenkAssignee
Wouter HazelhoffCreated by
Sam de VriesDue
2/1/2027Source
Risk treatment actionAbout this Risk
RSK-012 — Late patching of customer endpointsField engineers and the service desk keep the workstations of customers up to date, but some customers delay reboots or limit the maintenance hours. Devices that miss critical patches stay open to known exploits.
Measures
Patches roll out in rings, with a seven-day target for critical updates and a weekly report of the devices that are late. The service desk follows up with the customer on every device that is older than the target.
Risk treatment action
On trackNext action is 2/1/2027 — no urgency right now.