Why patch management now takes agencies 20 days instead of 149

FedScoop: It once took federal agencies an average of 149 days to patch critical vulnerabilities once they were alerted, but now that number is down to an “impressive” 20 days, says Chris Krebs, head of the Department of Homeland Security’s cybersecurity agency.

The boost in efficiency is due to one of the first binding operational directives the department ever issued, Krebs said Tuesday at the AFCEA Homeland Security Conference in Washington, D.C.

Read article