Yesterday morning, nCircle announced their Microsoft Patch Analysis report to help IT professionals plan for 2013. This report is composed of data from 36 months of Microsoft CVE and bulletin patches.
Andrew Storms, Director of IT Security Operations for nCircle, offered this insight on the analysis in a press release yesterday: “It’s pretty clear that Microsoft’s secure software development efforts are paying off. Over the last two years, Microsoft patch volume has become fairly predictable -- a huge change from the dramatic volume swings we used to see in 2010 and the first half of 2011. Barring unforeseen changes, the patch volume in 2013 should look a lot like 2012, which should be helpful for IT resource plans.”
nCircle’s analysis showed a total bulletin patch increase of 17% over the past 18 months. Internet Explorer patches likewise showed an increase of 17% from 2011 to 2012. Finally, the report showed that out-of-band patches have decreased by 75% (from 2010 numbers) for 2011 and 2012.
To view the full nCircle analysis, please visit the site here.