Patch Management Policy

The objective of vulnerability and patch Management process is to keep the components that form part of information technology infrastructure (hardware, software and services) up to date with the latest patches and updates.

Vulnerability and patch management is an important part of keeping the components of the information technology infrastructure available to the end user. Without regular vulnerability testing and patching, the information technology infrastructure could fall foul of problems which are fixed by regularly updating the software, firmware and drivers. Poor patching can allow viruses and spyware to infect the network and allow security weaknesses to be exploited.

These rules apply to all components of the information technology infrastructure and includes:

• Computers
• Servers
• Application Software
• Peripherals
• Cabling
• Routers and switches
• Databases
• Storage
• Telephone Systems

All users have a role to play and a contribution to make by ensuring that they allow patches to be deployed to their equipment.

Without effective vulnerability and patch management there is the risk of the unavailability of systems. This can be caused by viruses and malware exploiting systems or by out of date software and drivers making systems unstable.