Prevention

1. Change Control Process

   • Document who, when, why

   • Obtain appropriate signoff

   • Test & Verify

2. Patch Management Process

   • Regular cycle

   • Emergencies