Schedule the firmware updates of the core switches and firewalls
TSK-0284
-
Last updated
Open
Owner
Hans OverbeekAssignee
Marit KosterCreated by
Sam de VriesDue
3/26/2027Source
Risk treatment actionAbout this Risk
RSK-024 — Unpatched firmware on network equipmentSwitches, routers, and firewalls run firmware that vendors patch for security flaws several times a year. An update needs a maintenance window and a rollback plan, so it is sometimes postponed.
Measures
The network team follows the advisories of the vendors and plans firmware updates every quarter, and critical flaws sooner. The Cisco and Fortinet devices are in the asset register with their firmware version.
Risk treatment action
On trackNext action is 3/26/2027 — no urgency right now.