I know this question probably doesn't go here. but I dont know which overflow site to use. We have a web server that we use for customers to access our things. Our IT/security team believes it is on my developer to keep the system patched for security/operation reasons. I don't believe a web developer is going to be able to maintain patching efficiently. What are your thoughts on the following?
Should my developers be doing OS patching for security purposes?
Should my developers be responsible for doing scans to check for vulnerabilities?
Should the IT/Sec team be doing scans and notifying the developers that patches are needed?
How do you delineate the responsibilities in your environment?