Keeping up with PeopleTools patches to mitigate ongoing vulnerabilities
As we move to upgrade PeopleTools to keep current we're trying to grapple with what exactly we need to do to mitigate vulnerabilities.
Am I wrong in thinking that as PeopleTools patches are released approximately each month the only way to maintain the safest posture means we need to push PeopleTools patches out on a near-monthly basis? I'm not sure how to efficiently maintain non-prod and production environments that support numerous product lines when we have to rebuild environments non-stop. Not to mention some fixes that need to be fixed at the application (change package) level.
What are other clients thinking? Am I wrong that to truly address vulnerabilities we always need to be applying PeopleTools patches at both the Application Designer level and binaries level?