Background
Most ransomware uses vulnerabilities patched months earlier. Patching is the most effective single security activity.
Questions to ask yourself
- How often is our laptop fleet patched?
- Are servers patched within 14 days of a critical update?
- Are network devices (firewall, router, NAS) updated?
- Do we know what software is past End-of-Life?
- Is patching a person's job?
What you can do today
Make patching a habit
Three steps.
- 01Set Windows Update / macOS Update to automatic on all laptops.
- 02For servers and network kit, agree a patching cadence with your IT supplier in writing.
- 03List software past End-of-Life (Windows 7, Server 2012 R2 / 2016 in many cases). Replace, segment, or accept the risk with a date.