What does everyone use for their patch management? (Looking for cloud-based patch management solution.)

Cloud Security & GRC

3k views1 Upvote4 Comments

Sort by:

VP of Product Management in Software5 years ago

Todd Dekkinga any recommendations?

Director of I.T. in Education5 years ago

We use a KACE appliance. Does OS and app patching.

2

Senior Director, Head of Information Security Technology in Software5 years ago

Qualys has a nice solution. Tested and liked.

1 1 Reply

no title5 years ago

We use Bitdefender. Very new but integrated with endpoint security and cost effective

1

Content you might like

With cloud costs rising, are you taking any of these steps to optimize your D&A operations?

Adopting new cloud cost management tools21%

Improving cloud cost management practices60%

Updating data retention policies for cost reduction54%

Making adjustments to limit data transfer fees40%

Exploring different pricing solutions with our current provider(s)26%

Changing cloud providers11%

Changing cloud deployment (multi/single, private/public)8%

Nothing specific at the moment4%

View Results

Do you think your board/executive leadership understands cybercrime as an industry in itself?

Yes39%

Some but not all54%

No6%

I don’t know

View Results

Have you evaluated any “AI native” data security platforms so far (like Concentric AI, Normalyze, etc)? Interested to know your thoughts on these, whether or not you move forward with implementing.

As part of our NYSE IPO prep, we’re debating how to communicate our system hardening efforts in regulatory disclosures (e.g., SEC Form 20-F, SFC).

Would you recommend sharing % compliance (e.g., “85% CIS Tier 2”) or sticking to qualitative descriptions of how we identify and mitigate risks? Also, do SFC/ISO 27001 expectations require full ISMS integration, or is a % model acceptable?

We’re preparing for an IPO on the NYSE as a Foreign Private Issuer and evaluating CIS Benchmarks to measure OS and database hardening.

Our proposed tiers:
• Tier 1 (70–80%) baseline
• Tier 2 (85–90%) for sensitive data
• Tier 3 (95–100%) for mission-critical systems

Is 80% compliance defensible for IPO due diligence with SEC or SFC? Should Tier 3 be considered mandatory for critical systems? And can compensating controls (e.g., PAM, microsegmentation) offset gaps in legacy environments?