Best Practice Detail

13-8-8566

Network Operators, Service Providers, and Equipment Suppliers should assure that patching distribution hosts properly sign all patches. Critical systems must only use OSs and applications which employ automated patching mechanisms, rejecting unsigned patches. If a patch fails or is considered bad, restore OS and applications from known good backup media.

Status: Rollover New

References/Comments: Configuration guide for security from NIST (800-53 Rev. 3).

Historical events:

• Network Operators
• Service Providers
• Cable
• Internet/Data
• Wireless
• Wireline
• Cyber Security
• Network Operations
• Software
• CSRIC VII: Rollover New In CSRIC VII