# Patch management

> Patch management is the process of finding, testing, and installing software updates on computers, servers, and network devices so that known security flaws and bugs are fixed before they cause harm.

Also called: software patching, security updates, update management, patching.

Vendors release patches to fix flaws in operating systems, browsers, office software, and device firmware. Patch management puts that on a schedule: new updates are identified, tried on a few machines first, rolled out to everyone, and then verified. Tools such as RMM software, Microsoft Intune, or Windows Update policies do the installation and report which devices are still behind.

Many attacks use flaws that already have a fix available, so unpatched devices are among the easiest ways into a small business. Left to individual users, updates get postponed again and again. A managed process closes those gaps on a predictable timetable and produces a record showing devices are up to date, which security schemes such as Cyber Essentials and the Essential Eight expect.

Watch for the things automatic updates miss: third-party apps, firmware on firewalls and Wi-Fi access points, and laptops that are rarely switched on. Software that the vendor no longer supports cannot be patched at all and needs replacing. Updates also need restarts, so agree on a maintenance window. We handle patching for managed devices and report on what remains outstanding.

## Where we do this work

- [Managed IT services](https://techpitsolutions.systems/msp)
- [Cybersecurity services](https://techpitsolutions.systems/services/cybersecurity)

## See also

- [Remote monitoring and management (RMM)](https://techpitsolutions.systems/glossary/remote-monitoring-and-management): Remote monitoring and management (RMM) is software that IT providers install on computers and servers to watch their health, apply updates, run maintenance tasks, and connect remotely to fix problems.
- [Cyber Essentials](https://techpitsolutions.systems/glossary/cyber-essentials): Cyber Essentials is a UK government-backed certification scheme that sets out five basic technical controls, covering firewalls, secure configuration, security updates, user access control, and malware protection, to guard against common online attacks.
- [Essential Eight](https://techpitsolutions.systems/glossary/essential-eight): The Essential Eight is a set of eight baseline cybersecurity strategies published by the Australian Signals Directorate to help organizations protect internet-connected IT networks against common cyber threats.

---

Source: https://techpitsolutions.systems/glossary/patch-management

TechPit Solutions · Run by AI, backed by real people. A remote team working with businesses in the US, UK, Canada, Australia, New Zealand and Europe. Email info.techpit.co@gmail.com, WhatsApp +92 344 3360585. Book a 15-minute call: https://techpitsolutions.systems/contact