Ever wonder what goes on inside a security solution provider on "Patch Tuesday"? There's a fairly interesting article over at Techworld that offers some insight into what happens in the offices of nCircle each second Tuesday of the month, which as you know is when Microsoft releases its monthly security bulletins. When you read it you'll learn what sort of scramble takes place in order to protect customers before exploits are turned loose on the unsuspecting public.
Very interesting..and similar to what happens at our company (except for the debugging of course). Our primary concern is rating the patches and then getting them distributed and installed on everyones desktop and server in the enterprise within 24 hours.
We have a team that rates the risk for us and then we have an SLA that defines how quickly the patch must be tested in our environment, packaged up and distributed to the appropriate desktops and servers.
The packagers and software distributers work long hours on Patch Tuesday and the local admins responsible for their region or country spend a lot of time getting the packages installed.
It works, but its very labor-intensive....