Managing the patch process
The MSRC is a core team consisting of a number of program managers, each of whom focuses on a specific technical area - be it Internet Explorer, Windows, Office and so on.
Understandably, while there's a good deal of process involved in producing the many patches that Microsoft puts out on the second Tuesday of each month, Mulholland can only speak about some part. But he was quite forthcoming during a phone chat.
Once a vulnerability is deemed to be of sufficient importance to be patched, a virtual team gets on the job, Mulholland said. "Let's assume this is a Windows flaw. Some people are in Hyderabad, India, others in Ireland (where most of the localisation is done)."
By Sam Varghese at The Age.
[ Read more ]
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.