Page 34 - Cyber Defense eMagazine - December 2017

TEN KEY ENTERPRISE ENDPOINT SECURITY BEST

PRACTICES WITH ANDY MALONE

By Bill Bernat, Director and Technology Evangelist, Adaptiva

I recently invited security expert Andy Malone to join me and co-host Ami Casto for an

3
episode of the Enterprise Endpoint Experts (E ) podcast. Andy is a Microsoft MCT and
MVP, popular security author, consultant, and speaker. He’s also a sci-fi author, which

you can learn more about by listening to the podcast at
www.adaptiva.com/blog/2017/enterprise-endpoint-security-windows-10-andy-malone. In

this blog, I pick out 10 of the important security configuration management best

practices he shared with us.

1. Keep Windows Up to Date

The most important thing for any company to do to stay secure is to apply OS updates

to all systems as quickly as possible. Andy puts it this way, “Patch, patch, patch. And
when you finish patching, patch some more.”

While some companies force users to update, some give them more leeway. Microsoft

used to make this a lot easier, with less frequent updates on Patch Tuesdays. Now, it’s
more of a drip, drip, drip. Part of the issue is that updates can require a reboot, which

34 Cyber Defense eMagazine – December 2017 Edition
Copyright © 2017, Cyber Defense Magazine, All rights reserved worldwide.