What must an IT organization do to ensure that software updates and security patches are implemented timely?
a) Conduct regular vulnerability assessments.
b) Establish a patch management policy.
c) Test patches in a controlled environment before deployment.
d) Schedule updates during off-peak hours.