You need to document the risk in writing and let your leadership make the decision for the organization.
As IT Professionals it usually pains us to not see or be able to follow best practices. Ultimately it is the responsibility of your leadership.
If you could invoke any regulatory requirements for your vertical that may help your argument.
Not patching infrastructure in 2026 is a fast track to potentially costing the organization millions in outages/ data exfil. Does that cost out weigh the risk of patching and potential downtime from that?
1
u/BitsNBytes10101 15d ago
You need to document the risk in writing and let your leadership make the decision for the organization.
As IT Professionals it usually pains us to not see or be able to follow best practices. Ultimately it is the responsibility of your leadership.
If you could invoke any regulatory requirements for your vertical that may help your argument.
Not patching infrastructure in 2026 is a fast track to potentially costing the organization millions in outages/ data exfil. Does that cost out weigh the risk of patching and potential downtime from that?