The Novaspect Patch Management solution provides patch management for OT systems, automating the installation of approved software updates for the applicable Industrial Control System vendor.
Download Service Data Sheet
Core
Patch Management implements installing available Microsoft (MS) security updates, updating the Virus Scanner DAT file and installing the appropriate System Hotfixes quarterly. This includes the following main types of components:
CONFERENCE CALL
Identifying scope of work and site requirements; verification of system architecture.
REVIEW AND ON-SITE INSTALLATION
Approving security updates and hotfixes based on requirements of the specific Industrial Control System.
REGISTRATION FILE
Running and uploading to vendor if required.
SIS COMPONENTS (CURRENTLY NOT INCLUDED)
Depending on the update a system proof test may need to be re-done. Novaspect’s Core Patch Management includes:
- MS Security Updates*
- Virus Scanner DAT File
- Manufacture Hotfix Installation (Workstations)
- Manufacture Hotfix Installation (Controller)**
- Server/Switch/Firewall Firmware Hotfix Installation
- Creating a Trip Report
*Does not include Service Pack releases
**Controller Hotfix installation will require that the controllers be taken out of service. Systems with redundant controllers can be patched while the process is running. If the system has simplex controllers then the process MUST BE shut down in order to complete this effort.
Advanced
All Core Patch Management features, plus:
- Monthly Cumulative and Servicing Stack Updates for Windows environments
- Antivirus Software and Microsoft SQL Server Updates
- Content Server utilizing Root Upstream Server to compare installed updates against a list of newly approved updates
- Designing the deployment of the Integrated Patch Management and training on-site staff to properly maintain updates once configured
Premium
All Core and Advanced Patch Management features, plus:
- Deploying the latest patches on-site once per month
- Ensuring system health
- Publishing a report to confirm all applicable patches have been applied
- Onsite personnel assistance not needed.
