Knowledge Base
Find answers to common questions and learn more about our services
SQL Server cumulative updates testing matrix
## Overview
CU includes security + functional fixes—test apps before mass prod.
## Matrix axes
App tier (ERP, DW, misc), test type (smoke, reporting...
patch-vulnerability-change-management
msp
seed-library
May 11, 2024
Read more →
Hypervisor patch staging order
## Overview
Cluster patch order prevents split-brain or unnecessary VM downtime.
## Typical order
1. Backup verification reminder.
2. **Non-owner** n...
patch-vulnerability-change-management
msp
seed-library
May 10, 2024
Read more →
Rollback criteria before approving changes
## Overview
Define **when** to abort before starting—not during panic.
## Examples
Auth failures >1% synthetic checks; latency >2× baseline 10 minute...
patch-vulnerability-change-management
msp
seed-library
May 9, 2024
Read more →
Change ticket minimum fields for compliance
## Overview
SOC2 auditors sample tickets—missing fields fail controls.
## Required fields
Requester, CAB approval (if high risk), backout plan, affec...
patch-vulnerability-change-management
msp
seed-library
May 8, 2024
Read more →
Application dependency freeze during audit season
## Overview
Auditors hate moving targets—freeze non-security changes around SOC/ISO window.
## Window
Communicate 4 weeks ahead: only **security** ti...
patch-vulnerability-change-management
msp
seed-library
May 7, 2024
Read more →
Firmware updates for network gear cadence
## Overview
Firmware is patch Tuesday’s forgotten cousin—stable routers still get RCE bugs.
## Cadence
Quarterly review release notes; emergency push...
patch-vulnerability-change-management
msp
seed-library
May 6, 2024
Read more →
CVSS versus exploitability: prioritization talk track
## Overview
CVSS alone angers IT ops buried in “criticals” that will never be exploited.
## Blend model
Pair **EPSS** or vendor threat intel **exploi...
patch-vulnerability-change-management
msp
seed-library
May 5, 2024
Read more →
Vulnerability scan cadence by client tier
## Overview
One size fails both budget and risk—tier scanning depth.
## Example tiers
Gold: weekly authenticated scans + quarterly pen test assist. S...
patch-vulnerability-change-management
msp
seed-library
May 4, 2024
Read more →
Server reboot scheduling and client approval
## Overview
Patches without reboots lie about completeness—schedule intentionally.
## Pattern
Rolling reboot clusters; drain workloads; verify **quor...
patch-vulnerability-change-management
msp
seed-library
May 3, 2024
Read more →
WSUS versus cloud update channel tradeoffs
## Overview
WSUS offers control and LAN peering; Windows Update for Business/Intune offers simplicity and cloud routing.
## WSUS strengths
Deferrals,...
patch-vulnerability-change-management
msp
seed-library
May 2, 2024
Read more →
Emergency out-of-band patch process
## Overview
Zero-days or in-the-wild exploits need faster lanes than monthly maintenance—without bypassing approvals entirely.
## Triggers
CISA KEV a...
patch-vulnerability-change-management
msp
seed-library
May 1, 2024
Read more →
Patch Tuesday communication template
## Overview
Predictable cadence builds trust. Send a concise Patch Tuesday brief within 24 hours of release.
## Structure
Executive summary (2 senten...
patch-vulnerability-change-management
msp
seed-library
Apr 30, 2024
Read more →