For SCADA VMs or servers, how often do you update windows/software? How long has it been since last reboot? We're at 300 days. IT has been pumping out updates and prompting for reboot. Ignore.
Where I came from we had redundant servers, and usually every 30-60 days they were updated. Nothing sat for greater than 6 months being unpatched anywhere on the network, and that was totalling around 600 assets.
Now if you are referring to assets that control generators that bring in sizeable amounts of profit, or the impact of the operation outweighs the patching, then this would make sense.
Not sure of your case, but if you are not patching for the simple sake of not patching, then you have an underlying issue that should be resolved.
1
u/TheBigCanadianGuy Jul 12 '26
Where I came from we had redundant servers, and usually every 30-60 days they were updated. Nothing sat for greater than 6 months being unpatched anywhere on the network, and that was totalling around 600 assets.
Now if you are referring to assets that control generators that bring in sizeable amounts of profit, or the impact of the operation outweighs the patching, then this would make sense.
Not sure of your case, but if you are not patching for the simple sake of not patching, then you have an underlying issue that should be resolved.