* • How often do we apply vendor updates operating system software? Office productivity software? Other software?

* When we update computers, do you have to physically visit each computer, or do you use centralized management tools (e.g. SUS for Windows)?

* Do we set up computers for automated scheduled software updates?

* Suppose that major media are reporting that Microsoft has released a patch to close a major vulnerability in Windows. We need to update all our Windows computers immediately.

o How would we rapidly communicate with all users in the department?

o How long will it take us to complete this task for the 100 computers in our department?

o What about patching laptop computers our users have off-site?

o Should our users power down their computers or unplug them from the network until we can do this update?

* • Do we allow end users to install operating system patches (e.g. Windows Update)? Do we allow end users to install applications software?