How should patching be prioritised?
- A Actively exploited vulnerabilities on internet-facing systems first
- B Oldest patches first
- C Smallest patches first
- D Alphabetically by vendor
Answer
Actively exploited vulnerabilities on internet-facing systems first
Testing in rings, starting with a pilot group, catches a patch that breaks a business application before it affects everyone.





