Patching and updates
Keeping software current. The dullest and most effective security control.
Please note: This page explains what a term means. It is general information, not legal, financial, tax or investment advice, and it does not know anything about your business. Before you sign, file or commit to anything, check it with an accountant, a solicitor, or the official guidance we link to.
What it means
Patching applies vendor updates that fix security vulnerabilities in operating systems, applications, firmware and devices.
Why it matters
Most successful attacks exploit known vulnerabilities for which a fix was already available. Patching promptly removes the majority of the practical risk.
What it looks like in practice
Enable automatic updates where you can. Prioritise anything internet-facing and anything holding data.\n\nUnsupported software receives no patches at all, which is why end-of-life dates matter.
What to watch out for
Devices nobody owns: the router, the NAS, the CCTV, the printer, the old laptop in the cupboard. They are on the network and they are not being patched.
Where to get proper advice
The NCSC's small business guide, and Cyber Essentials, which makes patching one of its five controls.
Where to read more
Last reviewed 2026-08-28 by Fiducia Together · Next review due 2027-08-28
Please note: This page explains what a term means. It is general information, not legal, financial, tax or investment advice, and it does not know anything about your business. Before you sign, file or commit to anything, check it with an accountant, a solicitor, or the official guidance we link to.
Fiducia Together