Patch management.

Why it matters

Vendors fix security vulnerabilities constantly, and attackers move quickly to exploit them. Relying on users to click “update later” leaves gaps, especially for third-party apps like browsers, PDF readers and collaboration tools.

Managed patching applies updates consistently across every device, on a schedule that balances security with minimal disruption, and produces reports showing what’s patched and what isn’t.

What’s included

OS updates

Windows and macOS updates approved and deployed on a schedule.

Third-party apps

Updates for commonly targeted applications such as browsers and productivity tools.

Scheduling

Maintenance windows that minimise disruption to your team.

Exceptions

Devices or apps that can’t be patched are recorded and managed.

Reporting

Patch compliance reports for management, insurers and auditors.

Delivered with our partner N-able and managed by our team.

From setup to ongoing management

Step 1 · Assess

Current patch status across all devices.

Step 2 · Policy

Approval rules and maintenance windows agreed with you.

Step 3 · Deploy

Updates rolled out automatically.

Step 4 · Verify

Failures identified and remediated.

Step 5 · Report

Regular patch compliance reporting.

Frameworks it supports

This service contributes to the requirements of several frameworks. Coverage depends on your environment, so we confirm it during a gap review.

ASD Essentials

Vulnerability management: apply patches within risk-based timeframes and remediate exceeding risk thresholds.

CIS v8.1

Control 7 (continuous vulnerability management).

ISO 27001

Annex A 8.8 (management of technical vulnerabilities).

SMB1001

Technology management: automatic installation of software updates and patches.

Frequently asked questions