Yoran ready to ditch PADC for successor

The Homeland Security Department is considering alternatives to its year-old Patch Authentication and Dissemination Capability, which has failed to generate much agency interest.

What a new patch management service would do has not been determined, said Amit Yoran, director of the National Cybersecurity Division in DHS' Information Assurance and Infrastructure Protection Directorate. The only thing decided so far is that 'it is not a continuation of PADC,' he said.

'We have to measure ourselves by the value our programs provide,' Yoran said. 'We talked with agency chief security officers and CIOs. The message we got was that it was a good concept, but the program wasn't delivering the value we hoped for.'

PADC, a free service at padc.fedcirc.gov offered by DHS' Federal Computer Incident Response Center, tests and validates vendors' security patches, notifies government subscribers and provides a secure link for downloading the patches. But commercial tools are available for the same tasks.

'Configuration and patch management is a fundamental building block of effective IT security,' Yoran said. 'It is core.'

About the Author

William Jackson is a Maryland-based freelance writer.


  • 2020 Government Innovation Awards
    Government Innovation Awards - https://governmentinnovationawards.com

    21 Public Sector Innovation award winners

    These projects at the federal, state and local levels show just how transformative government IT can be.

  • Federal 100 Awards
    cheering federal workers

    Nominations for the 2021 Fed 100 are now being accepted

    The deadline for submissions is Dec. 31.

Stay Connected