Foreign Bank Patch Custody
Operational Services
Customer needs
As a globally renowned multinational bank, XX Bank plays a key role in the healthy financial development and economic progress of developing countries. Windows systems have various security vulnerabilities, which rely on patches released by Microsoft. However, XX Bank's intranet lacks internet access, preventing timely download of patches and updates. XX Bank needed to deploy a Windows Server patch update system to address this issue. Microsoft has developed Windows Server Update Services (WSUS), a patch update management software specifically for Windows systems. This allows patches to be downloaded from a single server and then distributed across the internal network.
Solution
- Microsoft regularly releases patches around the 10th of each month. The WSUS server in the company's POC environment is refreshed with the newly released patches for that month, and the patches that need to be updated are selected and pushed to the Windows Server in the POC environment for update testing to see if they can be updated normally.
- After all patches are successfully updated in the POC environment, export the patch-related files to a USB flash drive or mobile hard drive through WSUS, and disinfect the USB flash drive or mobile hard drive to ensure the safety of the exported data.
- Import the data from the USB drive or mobile hard drive into the WSUS server in the customer's production environment. Update the Windows Server patches in the DR environment first. If there are no problems with the DR environment patch update, update the Windows Server in the production environment last.
Customer Benefits
WSUS helps enterprises improve security, reduce operation and maintenance costs, and meet compliance requirements through centralized, automated, and phased patch management strategies.