Understanding the set of changes conducted to a server or system in order to improve, update, shore up security vulnerabilities, and remove bugs is often referred to as patching. This action, usually put forward by the vendor, is often automatic in client operating systems.

Create a patch management policy. The 250-750-word policy must include the following:

• Quality Assurance Plan: be clear and concise, utilize position title, and provide detailed instructions on requirements.
• Frequency: include events, timelines, and management requirements.
• Rollback Procedure: include a timeline, notifications, and supporting departments.
• Authorizing Authority: identify at least two levels up and include organizational notification requirements.
• Time of Day: identify maintenance window and exceptions to the policy.
• Summary: identify patching.