Patching and updates
Security updates ("patches") must be installed quickly. This page summarises SOP-IT-004 (current version v2, effective 2026-02-01).
How fast patches must be installed
| Severity | Install within |
|---|---|
| Critical | 7 days |
| High | 14 days |
| Medium | 30 days |
| Low | Monthly update cycle |
What changed from the old version
Version 1 gave more time: critical 14 days, high 30 days, medium 60 days, and low patches quarterly. Version 2 shortened every deadline. If you find a document with the old numbers, it is superseded.
How patches are rolled out
- IT first installs the patch on a pilot group of 30 devices.
- If the pilot is healthy, the patch is released to everyone else.
- The company aims for 98% of devices to be fully patched.
What you need to do
- Restart your laptop when asked. A pending restart is the most common reason a device is late.
- Do not postpone updates for more than a day or two.
- If an update breaks something, tell the service desk (Bob Kessler) straight away.
Exceptions
If a patch cannot be installed for a business reason, a team can ask for an exception. Exceptions last up to 30 days and need approval from IT; they are not renewed automatically.
Related
Owner: Liam O'Connor - Last updated: 2026-09-08