Premise: You cannot do an organization-wide push of security patches without major transaction costs.
Solution: Transaction costs must be lowered.
  • Enable automatic updates via the builtin software mechanisms and deploy ad-hoc instead of structurally
  • Break it down into smaller bits that aren’t dependent on each other to faster get to 80% saturation.
  • Allow pulls as well as pushes; let the mass decide how to deploy within a chosen framework.