1. Purpose of this Guide
This artefact demonstrates that your company’s devices are set to automatically install security updates, patches, and fixes. Cyber compliance requires this because attackers often exploit unpatched systems — turning “patch later” into “breach now.” Automatic updates are your armour polish: they keep your systems shining and secure without relying on memory or manual effort.
2. What You Will Submit
You will need:
-
A screenshot showing automatic update settings enabled.
-
This must clearly display:
-
The operating system (Windows, macOS, Linux).
-
That automatic updates are turned on.
-
(If possible) Confirmation that app and anti-malware updates are also enabled.
-
3. How to Collect / Obtain / Generate This Evidence
macOS:
-
Open System Settings → General → Software Update.
-
Ensure Automatic Updates is enabled (OS updates + security responses).
-
Screenshot this settings page.
Windows 10/11:
-
Go to Settings → Update & Security → Windows Update.
-
Ensure “Receive updates automatically” or “Check for updates → Advanced Options” is set to automatic.
-
Take a screenshot showing the toggle enabled.
Linux (Ubuntu example):
-
Open Software & Updates → Updates tab.
-
Ensure Automatic updates and security patches are enabled.
-
Capture a screenshot of the settings.
Anti-malware / Endpoint Protection (e.g., Microsoft Defender, Sophos, CrowdStrike):
-
Go to update or policy settings.
-
Screenshot showing auto-updates for virus signatures and security definitions.
4. Evidence Format
-
Accepted file types: PNG, JPG, PDF.
-
Suggested naming format:
YourCompanyName_AutoUpdates_YYYY-MM-DD.png
5. What “Good” Looks Like
-
Screenshot shows auto-updates enabled, not manual only.
-
Covers OS and security patches (not just optional feature updates).
-
Settings are clearly labelled so auditors know the screenshot is genuine.
Why it matters: auditors want to see your machines won’t miss critical security patches if someone forgets to click “Update now.”
6. Tips
-
Capture the setting from a real, in-use device.
-
Redact personal info (like user account names) if it appears.
-
For best coverage, include both OS and anti-malware auto-update screenshots.