Process of identifying, acquiring, testing, and deploying patches to keep systems secure.
Patch management is the systematic process of identifying applicable patches, testing them for compatibility, and deploying them across systems in a timely manner. Effective patch management requires visibility into software inventory, assessment of patch criticality, testing procedures, deployment automation, and exception handling for systems that can't be immediately patched. Patch management challenges include legacy systems, operational constraints, and the volume of patches requiring attention. Tools like Intune, SCCM, and third-party solutions automate patch deployment.
Why It Matters
The DSC Perspective:
Patch management is fundamental to security hygiene. Compliance frameworks universally require it. Most ransomware and breaches exploit known, patched vulnerabilities—effective patch management would have prevented them.