Minimizing patch management in crisis situation: call from digital service user associations to major providers

1 avril 2020 | ACTUALITÉS, Cigref in english, Communiqués

Beltug, Cigref and CIO Platform Nederland represent several thousand private and public organisations in Belgium, France and the Netherlands that use digital services.


Press release – 1st April 2020
Download the press release (pdf)

Since the generalisation of containment measures in Europe and throughout the world to combat the spread of COVID-19, companies and public organisations have organised in a few days the implementation of teleworking by employees and external service providers, on an unprecedented scale in terms of volume of users, speed of deployment and expected duration.

We would first of all like to compliment the providers of software, digital services and infrastructures on the impressive efforts they have shown in scaling up over the past weeks. We hope we can all continue to rely on them and their products and services in these difficult circumstances.

As many of the crucial functions of the ICT Departments must also now be monitored from remote locations, some of our members have alerted us about their difficulty in managing the patching of software and IT solutions in crisis context, and more particularly in situations of widespread homeoffices.

That is why our associations call, on behalf of their member organisations, on all suppliers concerned to take measures in favour of the temporary reduction of patching:

  • reduction in the size of patches,
  • limitation to essential security updates and vulnerability patches,
  • suspension of updates and patches for non-essential functional improvements,
  • development of a patching management system directly on the workstations of employees connected to the company’s information system via the Internet.

According to our sources, Microsoft is working in this direction. We call on other software publishers and cloud providers to do the same.

Danielle Jacobs
danielle.jacobs@beltug.be
+32 495 108851

Cigref

Thibault Luret
tluret@cigref.fr
+33 6 45 49 93 75

Ankie Tooten
ankie@cio-platform.nl
+3106 21 27 82 75

Guide de mise en œuvre de l’AI Act : Cartographie des obligations applicables aux organisations

La loi européenne sur l’Intelligence Artificielle, plus communément désignée comme AI Act, vise à créer un cadre global de confiance avec pour objectif le développement et le déploiement d’une IA respectueuse des valeurs européennes.  À partir du 2 février 2025,...

Guide de mise en œuvre de l’AI Act : Points clés – Introduction

La loi européenne sur l’Intelligence Artificielle, plus communément désignée comme AI Act, vise à créer un cadre global de confiance avec pour objectif le développement et le déploiement d’une IA respectueuse des valeurs européennes. Ce guide pratique s'adresse à...

Migration dans le cloud : point d’étape

Après deux années de travaux sur la migration vers le cloud, de 2020 à 2022, le Cigref avait marqué une pause sur ce sujet. L'objectif de cette interruption était de permettre aux organisations de poursuivre leur programme de migration et de recueillir, l'année...

IT Job Profiles Nomenclature 2024 version

Since 1991, Cigref has maintained a nomenclature of existing job profiles in the digital departments of Cigref member companies. This tool does not represent what IS professions "should" or "will" be, but what they are today in these organizations. It therefore...

Cloud migration : update

After two years of work on cloud migration, from 2020 to 2022, Cigref took a break from the subject. The aim of this pause was to allow organisations to continue with their migration programme and to gather updated, clear and constructive feedback the following year....