Patch management

Key Takeaways

What’s a patch? A patch is code that provides a fix or improves software. It gets its name from the days when computer code was kept on punch cards and programmers would modify it by physically patching holes with tape.

Patching is crucial for maintaining software because it prevents vulnerabilities from being exploited. Patching can also help improve user experience by addressing bugs and other pain points.

The process of patch management usually follows certain steps:

• Inventory check. In order to properly secure and maintain software, organizations need to have a good understanding of the software and hardware within their organization. Some organizations will tap asset management tools to do so.
• Identify and triage. Once an organization understands the scope of software within their organization, it’s time for them to identify vulnerabilities. Companies may use patch management software to assist with this. IT professionals will prioritize what vulnerabilities get addressed first over others.
• Testing, testing. IT professionals can obtain a patch from a vendor. Before applying a patch, it is important to test it in a controlled environment (like a sandbox) to ensure it doesn’t cause intended harm or disruption.
• Unleash the patch. Once the patch has been tested, IT professionals will deploy it to software. From here, they make sure the vulnerability or issue has been addressed from the patch and continue to monitor for new vulnerabilities.

Other relevant terms

When discussing patch management, you may hear a few adjacent terms:

• Hotfix. A quick software update meant to address a specific bug. They differ from a patch as they can be applied when a system is “hot.” (In other words, no system reboot is needed.)
• Coldfix. A scheduled software update meant to fix a bug. Unlike hotfixes, coldfixes require downtime.
• Update. Patches are usually quick, smaller fixes. Updates are more thorough modifications to software that are scheduled in advance, and can introduce new features.