This document provides guidance on creating a security patch and vulnerability management program and testing the effectiveness of that program the primary audience is security managers who are responsible for designing and implementing the program however this document also contains information useful to system administrators and operations personnel who are responsible for applying . Creating a patch and vulnerability management program published november 16 2005 this document provides guidance on creating a security patch and vulnerability management program and testing the effectiveness of that program the primary audience is security managers who are responsible for designing and implementing the program . Creating a patch and vulnerability management program draft acknowledgements the authors peter mell of nist tiffany bergeron of the mitre corporation and david henning of hughes network systems llc wish to express their thanks to rob pate of the united states computer. Creating a patch and vulnerability management program reports on computer systems technology the information technology laboratory itl at the national institute of standards and technology nist promotes the us economy and public welfare by providing technical leadership for the nations