After receiving an approved patch from the IACS vendor, what is BEST practice for the asset owner to follow?
After receiving an approved patch from the IACS vendor, what is BEST practice for the asset owner to follow?
The best practice for the asset owner to follow after receiving an approved patch from the IACS vendor is to prioritize the application of patches based on their severity. If a patch is marked as high priority, it indicates a critical issue that needs to be addressed promptly. Therefore, the patch should be applied at the first unscheduled outage to minimize potential risks and ensure the security and functionality of the IACS.
IC32M page 400 High - Within 1 week Medium (default) - withing 3 months Low - Within 2 years or next available outage None - Never