1. Patch Management: 4 Best Practices and More for Today’s Healthcare ITMay 11th, 201111:00 am PST / 2:00 pm EST

2. Meet Our Speakers Ian Bartell IT Director Roswell Regional Hospital Gerald Beaulieu IT Automation Expert Kaseya

3. Polling Question 1 What is your biggest pain point for Patch Management? - workstation - server - laptop - other

4. Patch: It’s the Same Problem A. Knowing about the patch, the severity, and the risk B. Getting the patch to all your servers and PCs

5. How Bad is Manual Patching? Monitoring for new patch: 10min/d or 61hr/yr 61hr * $70/hr = $4.5K Applying new patch: 10min or 0.16hr 0.16hr*500PC*$70/hr = $5.6K per patch MSFT patches/yr = 72 (3 yr avg) Impact of managing 1 image/yr: $4.5K+($5.6K*72) = $408K Source: Microsoft, 2010

6. And the Exploit Timeline is Shrinking Days Between Patch & Exploit As this cycle keeps getting shorter, patching is a less effective defense Automation for testing and deployment needed 331 180 151 25 Nimda SQL Slammer Nachi Blaster Source: Microsoft, 2010

7. Healthcare Institutions: Patching is Top Automation Target IT Service SW upgrades & patches Backups Monitoring Ticketing Response* 75% 61% 58% 38% *Out of 174 healthcare IT leaders when asked – by Kaseya – their top 2011 target for automation

8. 4 Best Practices for Patch Management... + 1 Bonus Tip Discover & assess 1 Identify & test 2 Evaluate & plan 3 Deploy & remediate 4 Automate 5

9. Discover & assess Best Practice #1Discover & Assess 1 Are there any threats in your environment? Has anything changed in your operation? Do you have an accurate, current inventory? Can your infrastructure support patch management?

11. How do you decide if the patch relevant? Needed?

12. Which PCs/servers will need a patch?

13. What is/are the system priority/ies?

14. Which systems are most vulnerable?

17. Do you notify users? Support?

18. Do you provide training?

19. Did you check all your distribution/deployment points?

20. At deployment

21. How do you monitor patch distribution progress?

22. How do you deal with slow connections?

23. Post-deployment

24. How do you deal with exceptions?12

26. Use predefined, predetermined network scans to assess installed - and uncover missing - patches

27. Identify

28. Create alerts to capture new software added to inventory

29. Create new patch schedules, where needed

30. Evaluate

31. Create periodic vulnerability reports - and compare to patch policy - to determine which patches are needed

32. Create patch-analysis and patch-test scenarios

33. Deploy

34. Schedule patch distribution by time, by system, by group, or by user-defined collection of systems

35. Create exception-handling routines

36. Create real-time deployment reports for users and managementAutomate 5

37. Recap: 4 Best Practices for Patch Management + 1 More Discover & assess Determine current state of environment 1 Identify & test Employ procedures to obtain patches and stack-rank for use across environment 2 Evaluate & plan Develop patch deployment policy and schedule, as well as a corresponding exception plan 3 Deploy & remediate Deploy & remediate Coordinate distribution with stakeholders, manage patch exceptions, and compile relevant reports 4 4 Automate Automate to reduce delivery cost, improve staff productivity, and ensure system performance 5

39. A single Kaseya user can proactively manage 1,000s of automated IT systems tasks in the same amount of time required by a team of technicians using other techniques.

40. Key Facts

41. Founded 2000 & HQ in Switzerland

42. Privately held, no debt, no external capital requirements

43. 33 offices worldwide in 20 countries with 450+ employees

44. 10,000+ customers

45. 5,000,000+ assets managed

47. Integrated Patch ManagementAutomated scans, policies, deployments & reports No WSUS! http://www.kaseya.com/get-started/demo.aspx

48. Other Market Leaders Universities and K-12 Schools Hospitals and Care Facilities Our Customers

50. Virginia Tech (500 PCs) used Remote Access (IT Toolkit) to decrease MTTR by 83%

51. N. Conejos School District (500 clients) saved $100K with automation and increased PC availability from 80% to 99%

52. Cano Petroleum (100 PCs) usedEE to demonstrate SOX compliance with 100% IT control

53. Integrated Health Management (250 workstations) achieved target HIPAA compliance every year since EE first deployed

54. BankFirst (150 PCs) used EE to satisfy FDIC compliance regulations – since 2007

55. Advanced Motion Control (500 workstations) used EE to reduce monthly CADD updates from 2 hrs/PC to 5 mins/PC

56. Redbox (10,000 clients) used EE to reduce number of kiosk-technician visits by 90% in 1 year

58. Polling Question #2 Would you like to learn more about … - Yes, I’d like to try Kaseya free for 30 days - Yes, but I have no idea what Kaseya costs - Yes, please have someone contact me - No, not at this time