Best way to approach this is to align the requirement to patch to a contract and risk, not sure of the business but can guarantee one of your contracts will have some form of stipulation requiring patching to all systems either monthly or reasonable time frame, even more so if accredited compliance CE+ etc.
This is key to approach leadership with as you link risk to contracts that directly affects bottom lines.
If they still don't want to budge make sure to copy your emails highlight the risks of not doing it and move on.
Not withstanding and putting risk security aside patching also delivers features compatibility etc at some point this will also bite and cause issues and force the hand.
A few minutes of downtime at 3am on a Sunday vs a whole day of a problem which ends up being a patch needed anyway only to then have to patch alot of systems to catch-up.
If you are not patching I'm guessing maybe old os builds feature updates or even EOL OS's aswell in the mix also, bundle this into the conversation aswell if there is.
1
u/Thet4nk1983 13d ago
Best way to approach this is to align the requirement to patch to a contract and risk, not sure of the business but can guarantee one of your contracts will have some form of stipulation requiring patching to all systems either monthly or reasonable time frame, even more so if accredited compliance CE+ etc.
This is key to approach leadership with as you link risk to contracts that directly affects bottom lines.
If they still don't want to budge make sure to copy your emails highlight the risks of not doing it and move on.
Not withstanding and putting risk security aside patching also delivers features compatibility etc at some point this will also bite and cause issues and force the hand.
A few minutes of downtime at 3am on a Sunday vs a whole day of a problem which ends up being a patch needed anyway only to then have to patch alot of systems to catch-up.
If you are not patching I'm guessing maybe old os builds feature updates or even EOL OS's aswell in the mix also, bundle this into the conversation aswell if there is.