Using the ISO 9569 Patch Management Methodology in Practice. Experience, Expectations, Surprises. (A30b)
Developing a good methodology that makes Common Criteria Certification faster and fit for Future is one thing. Gaining initial practical experience with it is quite another. Does the intention of ISO patch management always align with real life situations? Are there unexpected consequences and surprises that no one anticipated? Is the methodology flexible enough to cover all real-world scenarios, or does it need optimization and adjustment? And if so, how? This talk highlights the experiences gained from the initial application of the patch management methodology and highlights unexpected surprises as well as how they were or can be addressed.