Which team in your organization is responsible for patching Adobe on an Application Server? For more background: Adobe is required to run reports in one of our COTS Applications. Our choices are server team (OS patching), and application team (Application patching) and they each say the other team is responsible. We do not have a DevOps team or a Security team that can patch.
Sort by:
CIO in Government2 years ago
I don't have an equivalent situation in our organization. In our case the Applications Team is responsible for applications' security, therefore is there responsibility to maintain the patching.
Antonio
no title2 years ago
And even if you had a DevOps or Security team, I would still recommend that. The security team should own operating and producing accurate reports/data about necessary patches for vulnerabilities and DevOps should do the same for any platforms or in-house built apps, but a team that owns delivering business functionality (Your COTS App above) should also own it's sub-components at the application level.
no title2 years ago
Meh, too early. Security should own operating the vulnerability scanner and ensuring it's data/reporting is accurate and timely.
Whoever patches the COTS App should also patch Adobe because they should understand the context of the app's environment, conduct testing to make sure that reports run correctly after the test, etc. The OS team, although they could figure out, are one step removed from that and not the best choice.