Security Remediation Across 20,000+ Network Devices

Security vulnerabilities had to be remediated across more than 20,000 network devices of different types and generations. The challenge was to move quickly on risk while avoiding outages caused by the remediation itself.

A large, heterogeneous estate with varying criticality meant that a single 'patch everything' approach would either be too slow or too risky.

• Reduce security exposure in priority order
• Avoid service disruption from remediation changes
• Provide clear visibility of progress and residual risk

Grouped devices by criticality and exposure, defined remediation waves, and aligned change windows with operations teams. Progress and residual risk were tracked and reported to stakeholders.

Identify → prioritise → plan wave → approve change → remediate → validate → report.

Remediation governed at scale while maintaining service continuity and delivery commitments.

Competing priorities between security urgency and change freeze periods.

Prioritisation and transparency are what keep large remediation programmes moving.