The process of identifying, prioritizing, acquiring, installing, and verifying the installation of patches, updates, and upgrades throughout an organization.
Source(s):
NIST SP 1800-31B
NIST SP 800-40 Rev. 4