patch management

Patch management is the process of ensuring that cyber updates are routinely applied to correct vulnerabilities in software and firmware. According to the National Institute of Standards and Technology, enterprise patch management is defined as "[t]he process of identifying, prioritizing, acquiring, installing, and verifying the installation of patches, updates, and upgrades throughout an organization." Effective patch management requires a number of steps, the first being the creation of a comprehensive asset inventory. Then, vulnerabilities must be assessed and patches applied once they have been tested. Importantly, patches should be vetted and approved prior to being applied, as unexpected problems can sometimes accompany them. Once deployed, ongoing monitoring is essential to identify new vulnerabilities. Unfortunately, many organizations have gaps within these processes or apply them irregularly.