Patch management

Patch management is the ongoing process of finding, testing and installing software and firmware updates that fix security flaws and bugs across an organization's devices and systems.

Software vendors regularly release patches to close security holes discovered in their products. Patch management covers operating systems, business applications, web browsers, firewalls, network equipment and servers. It involves keeping an inventory, deciding which updates are urgent, testing where needed and confirming that installations actually succeeded.

Attackers watch for newly announced vulnerabilities and often begin scanning for unpatched systems within days. Many successful attacks on small businesses exploit flaws that already had a fix available. Insurers frequently ask about patching practices, and a missed update on an internet-facing device can be the opening for ransomware.

Practical tip: set a clear target, such as installing critical security updates within a defined number of days, and get regular reports showing which devices are behind. Do not forget devices people overlook, like firewalls, Wi-Fi access points, printers and the occasional laptop that rarely connects to the office.