What is patch management?
Patch management is the process of applying software and firmware updates to reduce known security weaknesses.
Simple example
A business regularly updates Windows, browsers, routers, and business applications after testing critical systems.
Why it matters
Unpatched systems are a common way attackers gain access, especially when vulnerabilities are publicly known.
Common warning signs
- The activity is unexpected or unusual for the business context.
- The request or system behaviour creates pressure to act quickly.
- Normal approval, verification, or security processes are bypassed.
- There are signs of unauthorised access, data exposure, or system change.
- Staff are unsure whether the request, message, or system behaviour is legitimate.
Cyber Doc view
This term should be understood in business context, not only as a technical issue. Good protection usually combines clear processes, appropriate technical controls, staff awareness, and a calm response plan.
What to do
Proactive steps
- Keep an inventory of systems and software.
- Prioritise critical and internet-facing updates.
- Test updates where business risk requires it.
- Schedule regular patch windows.
- Track failed or missed updates.
Reactive steps
- Patch exploited or exposed systems urgently.
- Review whether the weakness was used before patching.
- Restart or reconfigure systems if needed.
- Check dependent systems after updates.
- Document emergency patch actions.
Related terms
- Vulnerability
- Secure configuration
- Security operations