On 20/02/2020 16:59, Skylar Thompson wrote:

[SNIP]

> 
> We have this problem too, but at the same time the same people require us
> to run supported software and remove software versions with known
> vulnerabilities.

For us, it is a Scottish government mandate that all public funded 
bodies in Scotland are Cyber Essentials Plus compliant. That's 10 days 
from a critical vulnerability till your patched. No if's no buts, just 
do it.

So while where are not their yet (its a work in progress to make this as 
seamless as possible) frankly running unpatched systems for years on end 
because we are too busy/lazy to validate a new system is completely 
unacceptable.

JAB.

-- 
Jonathan A. Buzzard                         Tel: +44141-5483420
HPC System Administrator, ARCHIE-WeSt.
University of Strathclyde, John Anderson Building, Glasgow. G4 0NG
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

Reply via email to