ABSTRACT

This chapter discusses what an organization should include in the patch management process from a system and network device perspective. For the organization to determine what network devices and systems to include in the patch management process, an accurate and up-to-date inventory must exist. Asset management, also called inventory management, is discussed frequently and in extensive detail in later chapters. Having this accurate and regularly updated inventory is critical to ensuring that the patch management process is successful. For the purpose of this chapter, the assumption is that the organization has a well-documented inventory of all network devices and systems within its infrastructure. (Which is true, right?)

There are various types of systems and network devices within an organization’s environment, and this list is ever changing and growing. The following sections provide a breakdown of what types of systems and network devices can be and should be included in the patch management process.