4 best practices for patch management in education it
TRANSCRIPT
![Page 1: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/1.jpg)
4 Best Practices for Patch Management
April 20, 2011
11:00 am PST / 2:00 pm EST
![Page 2: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/2.jpg)
Introductions
Moderator: Gwen Solomon, Web EditorTech & Learning Custom Projects
![Page 3: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/3.jpg)
SpeakersGerald BeaulieuIT Automation Expert Kaseya
Chris Stroupe System Administrator KIPP Academy Houston, TX
![Page 4: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/4.jpg)
Polling Question 1
What is your biggest pain point for Patch Management?
- workstation- server- laptop- other
![Page 5: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/5.jpg)
Patch: It’s the Same Problem
5
B. Getting the patch to all your servers and PCs
A. Knowing about the patch, the severity, and the risk
![Page 6: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/6.jpg)
How Bad is Manual Patching?
6
Monitoring for new patch: 10min/d or 61hr/yr61hr * $70/hr = $4.5K
Applying new patch: 10min or 0.16hr0.16hr*500PC*$70/hr = $5.6K per patch
MSFT patches/yr = 72 (3 yr avg)
Impact of managing 1 image/yr: $4.5K+($5.6K*72) = $408K D-
Source: Microsoft, 2010
![Page 7: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/7.jpg)
And the Exploit Timeline is Shrinking
As this cycle keeps getting shorter, patching is a less effective defense
Automation for testing and deployment needed
7
Days Between Patch & Exploit
180
Nimda
Source: Microsoft, 2010
331
151
25
SQL Slammer
Nachi Blaster
![Page 8: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/8.jpg)
K12 Schools: Patching is Top Automation Target
IT ServiceSW upgrades & patchesBackupsMonitoringTicketing
Response*75%61%58%38%
*Out of 174 K12 education IT leaders when asked – by Kaseya – their top 2011 target for automation
![Page 9: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/9.jpg)
4 Best Practices for Patch Management + 1 Bonus Tip
9
Discover & assess
Identify & test
Evaluate & plan
Deploy & remediate
Automate
1
2
3
4
5
![Page 10: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/10.jpg)
Best Practice #1Discover & AssessAre there any threats in your environment?Has anything changed in your operation?Do you have an accurate, current inventory?Can your infrastructure support patch management?
10
Discover & assess1
![Page 11: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/11.jpg)
Best Practice #2Identify & Test• How do you learn about new patches?• How do you decide if the patch relevant? Needed?• Which PCs/servers will need a patch?• What is/are the system priority/ies?• Which systems are most vulnerable?• How will you test the patch itself?
11
Identify & test2
![Page 12: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/12.jpg)
Best Practice #3Evaluate & PlanHow do you ensure all parties agree with “need to deploy?”
Exceptions?How will you install the patch?
PC vs server? Corporate vs remote?Do you combine with other tasks?Who will do it?
When will you install the patch?How will you test an installed patch?
Do critical business functions still “work?”How much testing is required?Where does testing occur?
12
Evaluate & plan3
![Page 13: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/13.jpg)
Best Practice #4Deploy & Remediate• Pre-deployment
– Do you notify users? Support?– Do you provide training?– Did you check all your distribution/deployment points?
• At deployment– How do you monitor patch distribution progress?– How do you deal with slow connections?
• Post-deployment– How do you deal with exceptions?
13
Deploy & remediate4
![Page 14: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/14.jpg)
Best Practice Bonus TipAutomated Patch Management• Assess
– Use predefined, predetermined network scans to assess installed - and uncover missing - patches
• Identify– Create alerts to capture new software added to inventory– Create new patch schedules, where needed
• Evaluate– Create periodic vulnerability reports - and compare to patch policy - to determine
which patches are needed– Create patch-analysis and patch-test scenarios
• Deploy– Schedule patch distribution by time, by system, by group, or by user-defined
collection of systems– Create exception-handling routines– Create real-time deployment reports for users and management
Automate5
![Page 15: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/15.jpg)
Recap: 4 Best Practices for Patch Management + 1 More
15
Determine current state of environment
Employ procedures to obtain patches and stack-rank for use across environment
Develop patch deployment policy and schedule, as well as a corresponding exception plan
Coordinate distribution with stakeholders, manage patch exceptions, and compile relevant reports
Automate to reduce delivery cost, improve staff productivity, and ensure system performance
Discover & assess
Identify & test
Evaluate & plan
Deploy & remediate
Automate
1
2
3
4
5
Deploy & remediate4
![Page 16: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/16.jpg)
About Kaseya• Value Proposition
– A single Kaseya user can proactively manage 1,000s of automated IT systems tasks in the same amount of time required by a team of technicians using other techniques.
• Key Facts– Founded 2000 & HQ in Switzerland– Privately held, no debt, no external capital requirements– 33 offices worldwide in 20 countries with 450+ employees– 10,000+ customers– 5,000,000+ assets managed– Patented technology and FIPS 140-2 compliant
16
Patented#7,827,547
![Page 17: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/17.jpg)
The Kaseya Solution for Automated Systems Management
Comprehensive Automates all systems
management tasks Integration friendly Scalable and flexible
Uncomplicated Lightweight, 1 agent Cross platform Easy to install & use
via a single pane
Affordable On-premise or cloud
http://www.kaseya.com/products.aspx
![Page 18: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/18.jpg)
Integrated Patch ManagementAutomated scans, policies, deployments & reports
http://www.kaseya.com/get-started/demo.aspx
No WSUS!
![Page 19: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/19.jpg)
Our Customers
19
Other Market Leaders
Universities and K-12 Schools
Hospitals and Care Facilities
![Page 20: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/20.jpg)
Proven ROI
• Cano Petroleum (100 PCs) usedEE to demonstrate SOX compliance with 100% IT control
• Integrated Health Management (250 workstations) achieved target HIPAA compliance every year since EE first deployed
• BankFirst (150 PCs) used EE to satisfy FDIC compliance regulations – since 2007
Reduce Risk
• Advanced Motion Control (500 workstations) used EE to reduce monthly CADD updates from 2 hrs/PC to 5 mins/PC
• Redbox (10,000 clients) used EE to reduce number of kiosk-technician visits by 90% in 1 year
• National Health Service (1,000 PCs) saved 15 hrs/month on mandatory SW updates with EE
Reduce Cost• Family Health Center –
San Diego (1,000 PCs) deployed EE and improved core application uptime from 85% to 99.6%
• Virginia Tech (500 PCs) used Remote Access (IT Toolkit) to decrease MTTR by 83%
• N. Canejos School District (500 clients) saved $100K with automation and increased PC availability from 80% to 99%
Improve Service
![Page 21: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/21.jpg)
Other AccoladesIndustry Awards Industry Reviews
“Kaseya's products have a reputation for being easy to install and use, compared with many competitive products.”
Gartner, 2011 (#G00209766)
“Service automation is vital to IT success. Kaseya is purpose-built for this next era of computing.”
OVUM, 2010 (#TA001974ITM) “Kaseya’s strength lies in the ease of implementation, support for their customers, and comprehensive service level management.”
IDC, 2009 (#219336)
“Kaseya’s IT Automation Framework can help many types of IT management organizations. Quickly. Affordably.”
EMA, 2008 (#1429091307
![Page 22: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/22.jpg)
Next Steps• Explore Kaseya Patch Management
http://www.kaseya.com/features/patch-management.aspx
• Learn More About Kaseyawww.kaseya.com/PPSresources
• Contact [email protected] or toll free +1 877-692-2003
• Join the Kaseya Conversationwww.kaseya.com/community.aspx
22
![Page 23: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/23.jpg)
Today’s Webinar
Chris Stroupe System Administrator
KIPP Academy Houston, TX
Gerald BeaulieuIT Automation Expert
Kaseya
![Page 24: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/24.jpg)
Polling Question #2
Would you like to learn more about …
- Yes, I’d like to try Kaseya free for 30 days- Yes, but I have no idea what Kaseya costs- Yes, please have someone contact me- No, not at this time
![Page 25: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/25.jpg)
Q&A and Resources• Explore Kaseya Patch Management
http://www.kaseya.com/features/patch-management.aspx
• Learn More About Kaseyawww.kaseya.com/PPSresources
• Contact [email protected] or toll free +1 877-692-2003
• Join the Kaseya Conversationwww.kaseya.com/community.aspx
![Page 26: 4 Best Practices for Patch Management in Education IT](https://reader035.vdocuments.mx/reader035/viewer/2022062320/55d5686fbb61eb55658b459f/html5/thumbnails/26.jpg)
Thank You!
www.techlearning.com
www.kaseya.com/solutions/education.aspx