Best practice for Equifax to avoid future incursions is for it to:

1) Incorporate patch application into a change management process

2) Require staff members applying patches to email vendors for them

3) Require quality assurance (QA) staff to apply cybersecurity patches

4) Switch from open source to proprietary so#ware for its web sites