Patch management often presents conflicting demands on IT organizations charged with ensuring system security while optimizing system reliability and integrity. Because the time between discovering a system vulnerability and the emergence of an attack is declining, IT organizations are under pressure to apply patches before adequate testing, and without system downtime. A sound patch management strategy is a critical part of any secure enterprise.

Developing any patch management plan begins with a firm understanding of the current enterprise. Data must be gathered on the configuration of every server, workstation, and network component in the system. Such data is necessary when evaluating the risk and therefore the necessity of particular patches.