Any federal employee or contractor that has been through a background check and whose information may have been compromised in the OPM breach, beware of any emails or phone calls that are claiming to be from the government or others acting on their behalf. You are likely being scammed. Any notice you will receive will come in the mail. A June 30 alert from the U.S. Computer Emergency Readiness Team warned that “US-CERT is aware of phishing campaigns masquerading as emails from [OPM] or the identity protection firm CSID.”
This is a basic cost calculator for you to compute your typical monthly cost for patching your servers, PCs, laptops, tablets and associated application software. It also forms the basis for you to begin calculating your Return on Investment for software patching, or for comparison with alternatives to the manual process of patching operating systems and application software—such as Patch Management as a Service, also known as Vulnerability Management as a Service.
If you are presenting to management for a budget, and using this calculator as the basis for a Return on Investment (ROI), you will need to do more homework. An ROI measures as a ratio of the cost of investment against its expected benefit. For patching, calculating benefit can be very difficult to determine. How do you measure the cost of a system breach you have not yet had? You can estimate what expenses, penalties, and losses a company might incur when a breach occurs; but there is no certainty of a breach event and what those costs actually are. There are also regulatory compliance issues and/or potential fines for not patching, but those, too, can be vague. For calculating these potential risks and costs, it is advisable to enter into a discussion with your management team.