Why is patch management a critical security control?

• A. It slows down network traffic.
• B. It validates user identity for each session.
• C. It closes known vulnerabilities and reduces exploitable weaknesses.
• D. It backs up data daily.

Answer: (C)

Keeping software up to date with patches is essential because it directly closes known vulnerabilities and reduces the attack surface. When vendors release patches, they fix flaws that attackers can exploit to gain access, install malware, or escalate privileges. Applying patches promptly shortens the time window in which systems are exposed, strengthening security across operating systems, applications, and firmware. A solid patch management process also supports compliance and overall risk reduction, since unpatched software remains a common entry point for breaches.

Other practices mentioned—slowing network traffic, authenticating users for each session, or backing up data—serve important roles in security but do not address remediation of software weaknesses through updates. Patch management specifically targets vulnerability mitigation by keeping systems current with the fixes that close exploitable gaps.