■End user awareness is the
most effective tool.Work to make sure
that end users and LSPs understand the importance of applying not
only operating system patches, but application patches as well.Make sure that new student communications
mention the importance of bringing original CDs to campus.Expand the Information Security website to provide
resources for managing application security for common applications at
■Provide and test recommendations for patching MS applications
without needing original CD.
Proposal Subject to Approval
We have focused in the past year on putting in place services
to ensure that critical operating system patches get quickly applied.We currently do not have a systematic
program for ensuring that application security patches (e.g. Netscape
Navigator, AOL Instant Messenger, etc.) get deployed.In many cases, particularly for students our ability to
apply Microsoft Office patches is limited when students did not retain their
original Office CD.