After this month\u00b4s AI found vulnerabilities, a business question: what does it cost to run a patch process that can handle twice as many patches?<\/p>\n
Let\u00b4s look at where the time goes. Testing that a patch doesn\u00b4t break critical applications. Scheduling and running maintenance windows. Restarting servers and checking that services come back. Handling the systems that fail. Following up on the machines that were offline. Reporting to management and auditors.<\/p>\n
If all of that is manual, doubling the volume doubles the cost, or more likely, doubles the backlog. In most organisations, it will be the backlog.<\/p>\n
The alternative is to invest in automation now. Update rings, so patches are tested automatically on a small group first. Automatic deployment with automatic rollback. Hotpatching where available, so fewer restarts are needed. Automated health checks after the restart. Exposure data, so you know which patches matter most.<\/p>\n
These investments cost money and time up front. But they scale. Ten more patches a month cost almost nothing when the process is automated.<\/p>\n
Then there are the systems that can\u00b4t be automated: legacy applications, OT, systems owned by suppliers. They need a plan of their own. Isolation, compensating controls or replacement.<\/p>\n
So for management: ask what percentage of your patching is automated today, and what it would cost to raise it. Compare that with the cost of the backlog when the wave hits.<\/p>\n
The cheapest patch is the one nobody had to touch.<\/p>\n","protected":false},"excerpt":{"rendered":"
After this month\u00b4s AI found vulnerabilities, a business question: what does it cost to run a patch process that can handle twice as many patches? Let\u00b4s look at where the time goes. Testing that a patch doesn\u00b4t break critical applications. Scheduling and running maintenance windows. Restarting servers and checking that services come back. Handling the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4],"tags":[38,70,37],"class_list":["post-1532","post","type-post","status-publish","format-standard","hentry","category-security-architecture","tag-business","tag-cost","tag-patching"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1532"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1532\/revisions"}],"predecessor-version":[{"id":1563,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1532\/revisions\/1563"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}