What is Patch management?
In short
Patch management is the process of identifying, testing, approving and installing software updates that fix security vulnerabilities and defects, across all of an organization's systems.
Key takeaways
- Patches are prioritized by the severity of the vulnerability and the importance of the system.
- They follow change management: tested before production, with an emergency procedure for critical fixes.
- An accurate inventory of hardware and software is needed to know what to patch.
Where it's tested
ISC: Information Technology General Controls (ITGCs) — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A developer at a company has standing write access to the production database. Which ITGC category does this deficiency primarily relate to, and why does it matter?