IT Patch Management Strategy

David Blades made this Freedom of Information request to University of Edinburgh

The request was successful.

From: David Blades

28 March 2011

Dear University of Edinburgh,

IT security is a concern to all of us, in particular in an
Educational establishment. I would like to know;

a) What patch management solution, if any, is in place?
b) What was the cost of purchasing and installing this solution?
c) What is the cost of annual maintenance or subscription fee
for
this service?
d) When is this service due for renewal?
e) Who is responsible for your Patch Management strategy?

Yours faithfully,

David Blades

Link to this

From: GREENHALGH Helen
University of Edinburgh

30 March 2011

Dear Mr Blades

Thank you for your email of 28th March 2011 requesting information about our IT patch management strategy. I am writing to let you know that we have received your request and will process it as soon as possible, and certainly within 20 working days of the day we received the request. You will hear back from us by 25th April 2011 at the latest.

Yours sincerely

Ellie Greenhalgh
Administrator
Records Management Section
The University of Edinburgh
Old College, South Bridge
Edinburgh, EH8 9YL

Tel: 0131 650 2139
e-mail: [email address]

-------------------------------------------
AWAY FROM THE OFFICE? USE REMOTE ACCESS FACILITIES

You don't need to download data and carry it and the security risk with you; access it remotely using the University's remote access facilities.
Ask your IT support officer for more information or visit http://www.ed.ac.uk/schools-departments/....
-------------------------------------------

The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

Link to this

From: David Blades

30 March 2011

Dear Ms. Greenhalgh,

Thank you for your response. I will await your sending further
information

Yours sincerely,

David Blades

Link to this

From: Brian Gilmore
University of Edinburgh

30 March 2011


Attachment attachment.html
6K Download


D: Release of information

Thank you for your [letter/email/fax] of [date] requesting information
about [subject].  I am pleased to enclose the requested
information.  

Copyright in the information you have been given belongs to the University
of Edinburgh or to another party.  Copyright material must not be
copied, distributed, modified, reproduced, transmitted, published
(including published on the Internet or an intranet), or otherwise made
available in whole or in part without the prior written consent of the
copyright holder.

If you are dissatisfied with this response, you may ask the University to
conduct a review of this decision. To do this, please contact the
University in writing (including by fax, letter or email) or in some other
recorded form (e.g. audio or video tape), describe the original request,
explain your grounds for dissatisfaction, and include an address for
correspondence. You have 40 working days from receipt of this letter to
submit a review request. When the review process has been completed, if
you are still dissatisfied, you may ask the Scottish Information
Commissioner to intervene.

a) What patch management solution, if any, is in place?

Microsoft WSUS server for Windows updates, SCCM for distributing vendor
patches

b) What was the cost of purchasing and installing this solution?

Annual cost of £800 for Microsoft licenses

c) What is the cost of annual maintenance or subscription fee for this
service?

£800

d) When is this service due for renewal?

Service is perpetual

e) Who is responsible for your Patch Management strategy?

Strategy is agreed by Desktop Change Advisory Board

Brian Gilmore

Link to this

From: David Blades

1 April 2011

Dear Brian Gilmore,

Thank you for your response and cooperation in this matter.

Yours sincerely,

David Blades

Link to this

Things to do with this request

Anyone:
University of Edinburgh only:

Follow this request

There is 1 person following this request

Offensive? Unsuitable?

Requests for personal information and vexatious requests are not considered valid for FOI purposes (read more).

If you believe this request is not suitable, you can report it for attention by the site administrators

Report this request

Act on what you've learnt

Similar requests

More similar requests

Event history details

Are you the owner of any commercial copyright on this page?