Security Updates for University Devices

In the university environment, end-user devices include university owned:

• Desktop computers
• Laptops
• Tablets

Patching typically covers:

• Operating systems (e.g., Windows, macOS, iOS, Android)
• Web browsers (e.g., Edge, Chrome, Firefox)
• Productivity software (e.g., Microsoft 365 Apps)
• Third-party applications (e.g., Adobe Creative Cloud, Zoom, Java)
• Device firmware and drivers
• Security software

End-user devices are often the primary target for cyber attacks because they are used for:

• Email
• Web browsing
• File downloads
• Accessing university systems and data

Without regular patching, vulnerabilities can be exploited to:

• Install malware or ransomware
• Steal credentials
• Gain unauthorised access to university systems
• Compromise student, staff, or research data

Software manufactures typically release patches on a monthly cycle although critical updates in response to a security incident may be released within that cycle and require immediate roll-out.

If you miss a patch cycle, for example if you have been on leave, your device should update when reconnected,  and return to being compliant.

If your device remains in an uncompliant state, it can become a cybersecurity risk to University systems and data. To help protect our systems and data, access from the device may be temporarily restricted  until the required updates have been installed and the device is compliant again.