About the Author

author photo

Joe Harris, CCIE No. 6200 (R&S, Security & SP) is a Systems Engineer with Cisco Systems® specializing in Security. In addition to authoring Cisco Network Security Little Black Book, Joe has also been a technical reviewer for several Cisco Press publications and written articles, white papers, and presentations on various security technologies. He also assists various Certification Partners by beta testing their newest CCIE certification workbooks and has been recognized by Cisco as an SE Wall of Fame award winner.

See All Posts by This Author

PSIRT Changes

Cisco is announcing program changes for the publication schedule for Cisco Internetwork Operating System (IOS) Security Advisories. Starting on March 26, 2008, Cisco will release bundles of IOS Security Advisories on the fourth Wednesday of the month in March and September of each calendar year. 

This schedule change will not restrict us from promptly publishing an individual IOS Security Advisory for a serious vulnerability which is publicly disclosed or for which we are aware of active exploitation. Cisco is adopting this approach in response to extensive feedback from customers, who seek further predictability for support planning and deployment cycles. 

The current format of IOS Security Advisories will remain the same. The software table in the Advisory includes a list of recommended releases (where possible) for each software train that addresses all of the security vulnerabilities included in the bundle. All other non-IOS Cisco security vulnerabilities will continue to be announced per Cisco’s standard disclosure policy.

Post a Response