)
)
)
Summary
Good security starts with good IT. You can't spot anomalies without a baseline of what normal looks like on your network. Automox CISO Jason Kikta has run Automox's own IT and security as "customer #1" for two years, and he draws this from experience. He sets severity-based patch policies that give him the predictability to measure mean time to remediation and average exposure time. When a critical patch warrants it, he deliberately deviates from those policies. He treats patching as a daily exercise in allocating risk. He spends aggression where it matters and conserves it where the path to a target is unlikely.
)
)
)
