Best Practices for Using Agent Sara
Here are some tips on how to get maximum value from Agent Sara.
Run Immediately After Patch Tuesday
Why
The sooner you understand scope and impact, the sooner your team can start remediation.
How
Set a calendar reminder for Patch Tuesday release. With agent Sara you can create task for test environment and production environment. Upon successful execution, run the task on production.
You can establish specific patch rings (for example, test, pilot, production) to roll out updates in phases, enabling validation prior to company-wide implementation.
Create separate tasks for asset groups
Why
Different asset groups have different remediation priorities, timelines, and risk tolerances.
How
Create separate Agent Sara tasks for: critical assets, production servers, workstations and test system.
Track Progress Weekly
Why
Weekly tracking shows progress, identifies bottlenecks, and allows resource reallocation.
How
Set Agent Sara to run weekly by default, with daily or on-demand runs during high-threat periods.
Share email summary with leadership
Why
Regular updates keep leadership informed and confident in your patch management program.
How
Enable email notifications on your Agent Sara tasks. Share weekly summaries with CISOs, IT leadership, and Change Advisory Board (CAB) chairs.
Prioritize Critical Findings
Why
Not all Patch Tuesday findings are equally urgent. Critical findings should be remediated fastest..
How
In your prioritization plan, focus first on Agent Sara's Critical Patch Tuesday Vulnerabilities metric. Create dedicated change windows for these.
Align with Change Control
Why
Patch Tuesday remediation must follow your enterprise change-control processes.
How
Use Agent Sara summaries and patch jobs as change requests. Include impact analysis from Agent Sara metrics in your Change Advisory Board (CAB) presentation.
Use Chat Now for Quick Plans and Assign Task for Ongoing Work
Why
Chat Now gives you a plan right away. Assign Task runs again and again and tracks progress over time.
How
Use Chat Now right after Patch Tuesday to create the first remediation plan. Use Assign Task with a weekly schedule to track progress for the rest of the month.
Start with the Business Entity with the Highest Exposure
Why
Chat Now ranks your top 10 business entities by impacted findings. The first entity in the list usually reduces the most risk.
How
In the scope step, select the first business entity in the list, and then repeat Chat Now for the next one.
Plan Waves Around Your Change Windows
Why
Wave 2 fixes can affect business operations.
How
Roll out Wave 1 fixes first when you need quick progress with little risk. Book a change window for Wave 2. Send Wave 3 findings to the team that manages compensating controls.