Patching

Deploy patches to your software and firmware as quickly as possible. Enable automatic updates whenever possible.

Somes possibiliies : WSUS, PDQ Deploy, WAPT, etc.

SLA for patching according to CVE

Have you set up a maximum update time for your workstations/servers/software? If yes, do you take into account criteria such as the CVSS score, the fact that the server to be patched is on the Internet or not, that the CVE is known to be exploited ?