If you were the IT security officer at another company with a large web site

presence, knowledge of the Equifax intrusion would prompt you to:

1) Do nothing on the assumption that your company was immune to

intrusions

2) Exhort your staff to be complete and dependable in applying

security patches

3) Verify the existence of a simple notification path for cybersecurity

patches

4) Audit the operation of change control for software modifications

and updates