Knowledge Base
Find answers to common questions and learn more about our services
Reporting patch compliance to boards
## Overview
Boards want trendlines—not CSV dumps.
## Visuals
90-day line of **%** compliant; aging buckets for critical CVEs; notable exceptions foot...
patch-vulnerability-change-management
msp
seed-library
May 16, 2024
Read more →
RMM automation groups by maintenance window
## Overview
One global patch group angers global customers—map groups to time zones and business verticals.
## Design
`--` naming; dynamic membership...
patch-vulnerability-change-management
msp
seed-library
May 15, 2024
Read more →
Patch exemption approval workflow
## Overview
“Never patch production ERP Friday” needs formal risk acceptance—not verbal myth.
## Workflow
Engineer requests exemption with technical...
patch-vulnerability-change-management
msp
seed-library
May 14, 2024
Read more →
Java and Adobe recurring cleanup SOP
## Overview
Desktop Java/Reader sprawl invites exploit chains—inventory monthly.
## Actions
Remove unused JREs; standardize on single supported versi...
patch-vulnerability-change-management
msp
seed-library
May 13, 2024
Read more →
Legacy OS exception register maintenance
## Overview
Unsupported OS should die—until capital budget kills it, **register** every exception.
## Fields
Hostname, OS version sunset date, compen...
patch-vulnerability-change-management
msp
seed-library
May 12, 2024
Read more →
SQL Server cumulative updates testing matrix
## Overview
CU includes security + functional fixes—test apps before mass prod.
## Matrix axes
App tier (ERP, DW, misc), test type (smoke, reporting...
patch-vulnerability-change-management
msp
seed-library
May 11, 2024
Read more →
Hypervisor patch staging order
## Overview
Cluster patch order prevents split-brain or unnecessary VM downtime.
## Typical order
1. Backup verification reminder.
2. **Non-owner** n...
patch-vulnerability-change-management
msp
seed-library
May 10, 2024
Read more →
Rollback criteria before approving changes
## Overview
Define **when** to abort before starting—not during panic.
## Examples
Auth failures >1% synthetic checks; latency >2× baseline 10 minute...
patch-vulnerability-change-management
msp
seed-library
May 9, 2024
Read more →
Change ticket minimum fields for compliance
## Overview
SOC2 auditors sample tickets—missing fields fail controls.
## Required fields
Requester, CAB approval (if high risk), backout plan, affec...
patch-vulnerability-change-management
msp
seed-library
May 8, 2024
Read more →
Application dependency freeze during audit season
## Overview
Auditors hate moving targets—freeze non-security changes around SOC/ISO window.
## Window
Communicate 4 weeks ahead: only **security** ti...
patch-vulnerability-change-management
msp
seed-library
May 7, 2024
Read more →
Firmware updates for network gear cadence
## Overview
Firmware is patch Tuesday’s forgotten cousin—stable routers still get RCE bugs.
## Cadence
Quarterly review release notes; emergency push...
patch-vulnerability-change-management
msp
seed-library
May 6, 2024
Read more →
CVSS versus exploitability: prioritization talk track
## Overview
CVSS alone angers IT ops buried in “criticals” that will never be exploited.
## Blend model
Pair **EPSS** or vendor threat intel **exploi...
patch-vulnerability-change-management
msp
seed-library
May 5, 2024
Read more →