Security OperationsHigh
Patch Management
The process of acquiring, testing, and applying updates to software to fix vulnerabilities and improve performance
Content
What is Patch Management?
Patch Management is a key operational process in cybersecurity. It ensures that vulnerabilities in software are addressed by keeping systems up to date with vendor-issued patches.
Patch Cycle
- Identify needed updates
- Test patches in staging
- Deploy patches in production
- Verify successful application
- Document and review
Best Practices
- Prioritize critical security patches
- Test before applying to production
- Automate updates where possible
- Maintain rollback plans
Quick Facts
Severity Level
8/10
Purpose
Reduce vulnerabilities
Frequency
Monthly, or emergency (out-of-band)
Tools
WSUS, SCCM, Ansible
Example
Applying OS security updates regularly
Related Terms