From Network World:
Home Depot IT: Get hacked, blame Windows, switch execs to MacBooks
I have a real problem with this. Microsoft is not perfect, nor is any other software vendor. Whether it be an OS or application there are always patches that need to be applied. This is a fact of life in the IT / IT Security world. If you don't like it find another career.
All organizations MUST address the issue of patching their systems in a timely manner. I have seen far too many retail organizations still running Windows XP on their POS terminals. Not that there is anything wrong with XP, it was a good OS in its time. Key phrase "in its time", its time is now over and MS is no longer supporting it. R.I.P. Windows XP.
If you're still running XP, as I suspect Home Depot is, make plans to upgrade to Windows 7 and execute them ASAP. People are still actively exploiting XP. Since MS is no longer supporting it, and therefore patching it, anyone running XP is in a VERY VULNERABLE position.
By blaming Microsoft what Home Depot is doing is in effect blaming Ford (or GM, Chrysler, Nissan, Mercedes, Toyota ...) for having a car that blew an engine because they never bothered to change, or even check for that matter, the oil in said engine. Blame yourself Home Depot, take responsibility for your inaction and fix your policies and processes governing system/application process.
This should serve as a note to all other organizations out there; system patching is not something to be taken lightly. It is necessary and patches must be applied in a timely manner. saying "We didn't have time because of this issue, that circumstance or this other problem is not acceptable. FAILURE IS NOT AN OPTION WHEN IT COMES TO PATCHING VULNERABLE SYSTEMS!
I would really like to get some comments on this topic.
No comments:
Post a Comment