Patch Management Tools for Manufacturing Thursday Morning, Feb 7th. Troy Embree Procter & Gamble

Transcription

1 Patch Management Tools for Manufacturing Thursday Morning, Feb 7th Troy Embree Procter & Gamble

2 Patch Management Tools for Manufacturing Troy Embree, P&G Introduction Patch Deployment Tools What features are available What features are missing for manufacturing Building the required features into the patch deployment application Benefits & Lessons Learned Benefits e of MS MUG Patch working group 2

3 P&G Background 3 Global Business Units Beauty & Health Household Care Gillette 144 plants in 43 countries 103 Brands 23 Brands >Billion $US Support a variety of different control system manufactures IT functionality outsourced 3 billion times a day, P&G brands touch the lives of people around the world 3

4 Do we really need another tool? Why not use the same tool as IT uses for office computers? Lacked Flexibility Control what, when, and how updates are applied Lacked Visibility Was combined with other features that were not needed Resulting in a high price No knowledge of control o system applications 4

5 Patch Deployment Many tools are available to assist with the deployment of updates BigFix, WSUS, Kaseya, PatchQuest, NetChk Protect, etc. Each provides many beneficial features Centralized Deployment Reporting Support for Multiple OS Support for Application Updates Inventory Minimal impact to the network Minimal impact to client computer Granular Ga ua control to of what, when, & how it is updated 5

6 Patch Deployment for Control System Devices None of the tools available are geared for use with manufacturing applications Inventory tools do not automatically identify control system software Do not indicate if the update has been approved by the control system vendor Geared for local deployment or for enterprise deployment with centralized management 6

7 Our Approach Existing patch management tools are customizable Partnered with Interstates Control Systems Incorporated To configure and maintain the control system functionality within the Patch Management tool To maintain and provide support for the patch management application itself Choice of partner is important Need to understand both Control Systems Information Technology 7

8 Control System Customization Control System Customization Defined our control systems in the patch management software Allows users to easily know what control system applications are deployed on a computer Created baselines of vendor approved software Allows users to easily know what updates have been approved by our vendors Created sites to allow each manufacturing site to operate as if their computers and users were the only ones in the system 8

9 Benefits End users can easily apply the vendor approved patches to systems running the vendor software End users are more efficient Do not need to individually monitor all the control system vendors Do not need to build their own list of what computers contain what software Results in more computers kept up to date with their required patches in a faster time period 9

10 Lessons Learned More than one patch management tool was adequate to meet our needs All required configuration to meet our needs in manufacturing Would have cost less if the expense of configuration could be spread across several companies Via a patch management company building the features into the solution Via a 3 rd party that t acts as a common integrator 10

11 How can participation in MSMug help? Informal benchmarking with other companies Combined voice Can change our control system vendors behaviors May be able to attract Patch Management companies to providing control system functionality inherently in their applications 11

12 Thank You For more information, contact Troy Embree at 12