To comply with ISO 27001, patch management is a practical necessity. ISO 27001 is a broad cybersecurity standard, covering organizational processes and governance as well as technical protections. As part of its requirement to assess and respond to security risks, you must keep your endpoints up-to-date and protected from threats.