2023 IT Examiner School

Internal Use Only

System Update Processes Ensure management has a prudent process for managing patches & changes: • Testing prior to deployment • Mitigating controls to back out of a patch if it is causing problems • Detect missing patches • Reporting processes to ensure management is aware of changes

Internal Use Only

Vulnerability Assessment & Penetration Testing