1. Patch Management: 4 Best Practices and More for Today’s Banking IT Leaders An InformationWeek Financial Services Webcast Sponsored by

2. Webcast Logistics

3. Today’s Presenters Gerald Beaulieu Director of Product Marketing Kaseya Corey Ellis Information Technology Officer Century Bank & Trust

4. Polling Question 1 What is your biggest pain point for Patch Management? - workstation - server - laptop - other

5. Patch: It’s the Same Problem A. Knowing about the patch, the severity, and the risk B. Getting the patch to all your servers and PCs

6. How Bad is Manual Patching? Monitoring for new patch: 10min/d or 61hr/yr 61hr * $70/hr = $4.5K Applying new patch: 10min or 0.16hr 0.16hr*500PC*$70/hr = $5.6K per patch MSFT patches/yr = 72 (3 yr avg) Impact of managing 1 image/yr: $4.5K+($5.6K*72) = $408K Source: Microsoft, 2010

7. And the Exploit Timeline is Shrinking Days Between Patch & Exploit As this cycle keeps getting shorter, patching is a less effective defense Automation for testing and deployment needed 331 180 151 25 Nimda SQL Slammer Nachi Blaster Source: Microsoft, 2010

8. Finance Institutions: Patching is Top Automation Target Response* 75% 61% 58% 38% IT Service SW upgrades & patches Backups Monitoring Ticketing *Out of 174 finance IT leaders when asked – by Kaseya – their top 2011 target for automation

9. 4 Best Practices for Patch Management... + 1 Bonus Tip Discover & assess 1 Identify & test 2 Evaluate & plan 3 Deploy & remediate 4 Automate 5

10. Discover & assess Best Practice #1Discover & Assess 1 Are there any threats in your environment? Has anything changed in your operation? Do you have an accurate, current inventory? Can your infrastructure support patch management?

12. How do you decide if the patch relevant? Needed?

13. Which PCs/servers will need a patch?

14. What is/are the system priority/ies?

15. Which systems are most vulnerable?

18. Do you notify users? Support?

19. Do you provide training?

20. Did you check all your distribution/deployment points?

21. At deployment

22. How do you monitor patch distribution progress?

23. How do you deal with slow connections?

24. Post-deployment

25. How do you deal with exceptions?13

27. Use predefined, predetermined network scans to assess installed - and uncover missing - patches

28. Identify

29. Create alerts to capture new software added to inventory

30. Create new patch schedules, where needed

31. Evaluate

32. Create periodic vulnerability reports - and compare to patch policy - to determine which patches are needed

33. Create patch-analysis and patch-test scenarios

34. Deploy

35. Schedule patch distribution by time, by system, by group, or by user-defined collection of systems

36. Create exception-handling routines

37. Create real-time deployment reports for users and managementAutomate 5

38. Recap: 4 Best Practices for Patch Management + 1 More Discover & assess Determine current state of environment 1 Identify & test Employ procedures to obtain patches and stack-rank for use across environment 2 Evaluate & plan Develop patch deployment policy and schedule, as well as a corresponding exception plan 3 Deploy & remediate Deploy & remediate Coordinate distribution with stakeholders, manage patch exceptions, and compile relevant reports 4 4 Automate Automate to reduce delivery cost, improve staff productivity, and ensure system performance 5

40. A single Kaseya user can proactively manage 1,000s of automated IT systems tasks in the same amount of time required by a team of technicians using other techniques.

41. Key Facts

42. Founded 2000 & HQ in Switzerland

43. Privately held, no debt, no external capital requirements

44. 33 offices worldwide in 20 countries with 450+ employees

45. 10,000+ customers

46. 5,000,000+ assets managed

48. Integrated Patch ManagementAutomated scans, policies, deployments & reports No WSUS! http://www.kaseya.com/get-started/demo.aspx

49. Other Market Leaders Universities and K-12 Schools Hospitals and Care Facilities Our Customers

51. Virginia Tech (500 PCs) used Remote Access (IT Toolkit) to decrease MTTR by 83%

52. N. Conejos School District (500 clients) saved $100K with automation and increased PC availability from 80% to 99%

53. Cano Petroleum (100 PCs) usedEE to demonstrate SOX compliance with 100% IT control

54. Integrated Health Management (250 workstations) achieved target HIPAA compliance every year since EE first deployed

55. BankFirst (150 PCs) used EE to satisfy FDIC compliance regulations – since 2007

56. Advanced Motion Control (500 workstations) used EE to reduce monthly CADD updates from 2 hrs/PC to 5 mins/PC

57. Redbox (10,000 clients) used EE to reduce number of kiosk-technician visits by 90% in 1 year

59. Polling Question #2 Would you like to learn more about … - Yes, I’d like to try Kaseya free for 30 days - Yes, but I have no idea what Kaseya costs - Yes, please have someone contact me - No, not at this time

60. ON24 INSTRUCTION – Do not push results of this poll

61. Q&A Please Submit Your Question Now