Late patching of customer endpoints

Field engineers and the service desk keep the workstations of customers up to date, but some customers delay reboots or limit the maintenance hours. Devices that miss critical patches stay open to known exploits.

Measures

Patches roll out in rings, with a seven-day target for critical updates and a weekly report of the devices that are late. The service desk follows up with the customer on every device that is older than the target.