PATCH COMPLIANCE & AGEING TRACKER

Patch status is scattered by owner and platform, so overdue and critically ageing vulnerabilities slip through the cracks. Accountability for closing them is unclear.

Actors

  • Head of Vulnerability Management
  • IT & Infra Leads
  • Platform Owners

Systems / Vendors

  • Vulnerability management
  • Patch / endpoint management
  • Asset / CMDB

Business Question

"Which critical vulnerabilities are overdue, who owns them, and how long have they been ageing?"

What SPoG Does

  • Tracks patch status by owner and platform.
  • Surfaces overdue items and critical ageing vulnerabilities.
  • Makes remediation accountability clear.

Outcome Metrics

−35%

Overdue patches

1

Live patch view

6–10 wks

To first outcomes