home/glossary/Patch management

Patch management

nounverified·updated May 9, 2026

The systematic notification, identification, deployment, installation, and verification of operating system and application software code revisions. These revisions are known as patches, hot fixes, and service packs.

MWENISTIR 7298: Glossary of Key Information Security Terms, Revision 2

Senses

ISACA Cybersecurity Glossary

An area of systems management that involves acquiring, testing and installing multiple patches (code changes) to an administered computer system in order to maintain up-to-date software and often to address security risk Scope Note: Patch management tasks include the following: maintaining current knowledge of available patches; deciding what patches are appropriate for particular systems; ensuring that patches are installed properly; testing systems after installation; and documenting all associated procedures, such as specific configurations required. A number of products are available to automate patch management tasks. Patches are sometimes ineffective and can sometimes cause more problems than they fix. Patch management experts suggest that system administrators take simple steps to avoid problems, such as performing backups and testing patches on non-critical systems prior to installations. Patch management can be viewed as part of change management.

Classifications

Entity Type

Process95%rule-basedr:entity.process.workflow.v1
?unassignedlast reviewed

Sensitivity

unclassified

Information Class

unclassified

Variants

plural
Patch managements
possessive
Patch management's
pluralpossessive
Patch managements'