FITS OM: How Patch Management works
Patch Management uses information from the CMDB (configuration management database) and a network topology (map) managed by the FITS Configuration Management to provide a clear picture of the components that make up the network and how these are configured.
Patch Management focuses on maintaining the availability and security of the technology which supports the ICT services by updating the following in a planned way:
- Software designed to protect the network against threats such as viruses, Trojans, worms and spyware
- Unpatched software and drivers.
For Patch Management to be effective, the patch administrator needs to have access to information about new patch releases, antivirus and spyware updates, driver updates and so on. You can make a list or spreadsheet of manufacturers' websites that hold the patches and updates in the configuration management database to give all technical support staff access to this important information. The patch administrator can create the list and keep it up to date by regularly visiting manufacturer and supplier websites, or by subscribing to mailing lists.
Some websites are now beginning to add RSS (really simple syndication) feeds to their sites, which allows the patch administrator to take the headlines from the site and list them all together on one page. The patch administrator can then see at a glance the changes that are relevant and then construct a custom page with information about driver updates from multiple suppliers.
It is recommended that the patch administrator allocates time for keeping up to date with the latest information about updates for all of the components in the network.
Patch Management terms
| Patch or fix | A release of software that includes bug fixes or performance- enhancing changes |
|---|---|
| Driver | Software required by the operating system to make a piece of hardware function |
| Service release or service pack | A release of software that bundles together several patches and/or updates to provide a clear benchmark or level of release (eg 'This software has Service Release 1 installed.') |
| Update | A release of software that adds new functionality to an earlier version |
| Version or build | Software that has a numeric or named attribute denoting its maturity or age (eg 'Are you on version 1 or 2?') Higher value increments indicate a more mature release, which is likely to have fewer bugs and to run better than earlier builds. |