Task 8.4: Performing Security Assessments with IT Shavlik

Patch management is never an easy task, especially if you are in charge of a large number of systems. It can seem like a never-ending task. Virulent code, such as Code Red, Nimda, Nachi, Sobig, and Blaster, has exploited systems that have not been properly patched.

The first step in the patch-management process is to develop a complete network inventory. The next step is to implement a change-control policy; after all, an inventory list doesn’t do any good if you can’t track and control changes to your network. With these things in place, you are ready to begin monitoring for new vulnerabilities and patches that are available for everything you have identified as being part of your inventory. ...

Get Security Administrator Street Smarts: A Real World Guide to CompTIA Security+™ Skills, Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.