Main website
Government Drupal Developers NetworkCommunity

SecuritySecurity & Compliance

Poll: how quickly do you apply Drupal security updates?

Started by Priya Shah on · 368 views · 2 replies · 6 likes

PS

Priya ShahModeratorStarted the thread

Lead Drupal Developer, Government Digital Service ·

Settling an internal debate. For a highly critical core security release, how fast do you usually get it to production?

Poll

Time from security release to production (highly critical)

  • Same day30% · 3
  • Within 48 hours40% · 4
  • Within a week20% · 2
  • Next scheduled release10% · 1

10 votes · Log in to vote

2 replies

  1. Ben CarterGroup lead

    Security Engineer, Government Digital Service ·

    #1

    Same day for core. We pre-approve security releases in our change process so there's no CAB wait.

  2. Marcus Bell

    Senior Developer, Brighton & Hove City Council ·

    #2

    48h, mostly because our supplier's hosting window is fixed. Trying to change the contract at renewal.

Join the conversation

GDDN is for people working on Drupal in government. Log in or apply to reply.