A mitigation strategy in the ASD Essentials (currently the Essential Eight), assessed against 9 tests at Maturity Level One.
Patching applications means keeping the software on your devices, browsers, office suites and PDF readers up to date, and removing software that vendors no longer support.
Why it matters
Attackers exploit known application flaws within days of disclosure. Most organisations carry a long tail of line-of-business applications, so a single unpatched system is a realistic entry point into sensitive data.
How Conformance helps
- Maintain a live inventory of every application in use
- Patch internet-facing and high-risk apps within the required window
- Use a vulnerability scanner to find missing patches, not just the vendor updater
- Remove applications that are no longer vendor-supported
- Keep patch dates as evidence you can show an assessor
How Conformance helps
Conformance validates this strategy from the evidence your organisation already produces, shows your maturity level, and tells you the next step to raise it.
Official guidance: ASD Essential Eight Maturity Model