Enterprise Patch Management Implementation Guide

This guide outlines the implementation of an enterprise patch management program at GE Vernova, led by Corey Amsler, who has extensive experience in IT and vulnerability management. The document begins with a problem statement indicating the need for a centralized patching service to manage vulnerabilities across a hybrid infrastructure that includes both on-premises and cloud environments. The solution involves the selection of Qualys Patch Management for its fast deployment and expandable capabilities. Key elements of the program include standardized tagging for assets, a firm patching schedule, and user role-based access to streamline the process. Continuous improvement measures are also discussed, such as enhancing patch management capabilities and automating the installation of missing certificates. The results demonstrate a successful foundation for patching, with thousands of assets onboarded and patches deployed, all while maintaining minimal operational impact.