D3-PM

Patch Management

Systematically apply security patches and updates to reduce exposure to known vulnerabilities.

D3FEND / Harden

Implementation

  • Establish patch testing and deployment process
  • Prioritize patches by risk score
  • Maintain patch compliance metrics
  • Automate patch deployment where possible
  • Document exceptions and compensating controls

Tools

  • Microsoft WSUS/SCCM
  • Qualys Patch Management
  • Automox
  • Ivanti Patch
  • ManageEngine Patch Manager

ATT&CK mappings

3

MITRE D3FEND ↗