Tools for Auditing Software Updates
One of the most important concepts in security is, "Trust, but audit." Auditing provides a critical layer of protection against human error and omission. In the case of software update management, auditing enables you to verify that updates have been distributed correctly and that updates are not removed after distribution.
Microsoft provides several tools for auditing software updates and the software update process:
WSUS. Described earlier in this chapter, WSUS enables you to view which updates have been distributed to which computers. To detect updates that are removed after distribution and new computers that do not have the proper updates installed, use WSUS reporting in conjunction with one of the other ...