Creating Vendor Bulletins for Patch Management - PAS Integrity Software Suite - 7.3 - Help - Intergraph

On a regular basis, such as monthly or quarterly, each vendor publishes a list of Microsoft patches that they have tested and verified as supported with one or more of their products. To deliver this information in Cyber Integrity, you need to create vendor bulletins. A vendor bulletin identifies one or more products from a vendor, and it lists the patches that are supported for each of those products. After you create vendors and associate vendor aliases with them, you can create, edit, or delete vendor bulletins.

Once a month, you should collect the list of patches that each vendor has approved and create a bulletin for each vendor with that information to help you evaluate and implement patches safely throughout your OT environment. You can create bulletins to identify vendor/product sets and related patches to test and then implement.

To create a vendor bulletin:

1. Open the Cyber Integrity web interface, and click Patches > Bulletins in the left navigation bar.

2. Select a vendor in the Vendor field.

3. Click Add New to open a blank bulletin.

4. Type a name for bulletin in the Bulletin ID field, such as Patches - Oct 2017, and select an effective date using the Bulletin Date field.

5. If you have an attachment to save with the bulletin, click the Browse button, select the file to attach, and then click Open.

6. Select which products to include in this bulletin by completing the following steps:

   1. Click Add Product(s). The Add Products window is displayed.

   

   1. Check the check box next to each product you want to add to the bulletin. Select at least one product. You do not need to add all subcomponents.

   2. Click Add Selected Products, and then click Close. The products are now listed in the Selected Products field in the bulletin.

7. Select the updates (patches) to add to the bulletin by completing the following steps:

   1. In the Selected Products list, click Select next to the product for which you want to select the updates.

   2. Click Add Update(s). The Add Updates window is displayed.

   

   1. Check the check box next to each update (patch) you want to add to the bulletin. Cyber Integrity lists the patches in the Available Patches list that are applicable to the computers that have the selected product installed.

   Each product in the bulletin has its own list of updates. You can include the same patch in the list of updates for more than one product in a bulletin, but duplicate updates for one product are not allowed.

   1. Click Add Selected Updates, and then click Close.

   2. Repeat these steps for each of the other products listed in the bulletin.

8. Click Save when you are finished.

You can edit an existing bulletin to add products and updates to a bulletin. You can also delete selected products or updates from a bulletin, but only if those products or updates have not advanced past the beginning state. Once the assessment process has begun, Cyber Integrity will not allow you to delete.

You can delete an existing bulletin, but only if those products or updates have not advanced past the beginning state. Once the assessment process has begun, Cyber Integrity will not allow you to delete.

When you delete a bulletin, the information previously stored in the bulletin is eliminated from the database.