Security Controls 101: Patching

Patch management is the process of applying software updates to both operating systems and software applications. One of the most important functions of software patching is security. It is important because it fixes vulnerabilities in your software and applications that are susceptible to cyberattacks, which reduces the risk your organization has. When I was a lot younger, I took martial arts with all of my buddies and our instructor would occasionally tell us as he was teaching something important but simple that it was “so simple it was hard.”

This is one of those security measures that can be overlooked because it is “so simple it is hard.” These updates are simple to apply, and typically take minimal time, but the bang for the buck as far as security goes is great! As it applies to cyber insurance, this is one of those items that will definitely be required during underwriting, most carriers want to see patches applied within 30 days of being released. It’s always a good practice to review the frequency of your security patching policy in your company, and use a vulnerability scanning app to identify any gaps in your process.