DevOps Boston - Heartbleed at Acquia

This document summarizes Marc Seeger's presentation at the Boston Devops Meetup on May 20th 2014 about how his company addressed the Heartbleed vulnerability. The presentation was divided into two acts: technology and communication. Under technology, it described how they assessed risk, identified over 8000 machines that may be vulnerable, and began patching servers. It discussed rollout challenges and using internal and external monitoring. Under communication, it outlined setting up communication channels, status updates on their status page and Twitter, documentation, and proactive communication with customers. It concluded by describing post-mortem reviews and changes made since then like assigning an incident commander and adding security vetting resources.