LiveWire Spotlight on NERC Lessons Learned – Patch Management Failures
Today’s LiveWire Spotlight looks at two NERC Lessons Learned – “teachable moments” where failures in the patch management process led to the unexpected loss of EMS and SCADA. They suggest that IT specialists should question their assumptions as they prepare for a patch update or decide which patches are relevant to their application.
The failure of patch management processes that support situational awareness is one of NERC’s top reliability concerns. Severe penalties may be applied if Registered Entities experience a failure because they did not act upon these Lessons Learned.