Inside GRC Flow
Services
Projects
Encyclopedia
FAQ
Contact

Feedback Sign in Get started

Inside GRC Flow
Services
Projects
Encyclopedia
FAQ
Contact
Share feedback
Sign in

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

Inside GRC Flow
Services
Projects
Encyclopedia
FAQ
Contact
About

Frameworks

ISO/IEC 27001
GDPR
NIS2
DORA
HIPAA
PCI DSS

Legal

Terms
Privacy
Legal notice

© GRC Flow

Vulnerability and patch management procedure template

Inside GRC Flow
Services
Projects
Encyclopedia
FAQ
Contact

Procedure template

Vulnerability and patch management procedure template

The 5 steps of this procedure, as the template writes them. You adapt them to your company, then approve and download the document.

Create this procedure

The steps

Scan systems for vulnerabilities at least monthly.
Rate each finding by severity and exposure.
Patch critical vulnerabilities within 14 days, others within the agreed timeframes.
Track exceptions with a compensating measure and an expiry date.
Report open vulnerabilities to management every month.

Other procedure templates

Supplier onboarding and review procedure
Business continuity and disaster recovery procedure
IT incident management (service desk) procedure
IT continuity plan
Standard operating procedure
Recurring operational workflow