Enterprise patch management requires governance to ensure seamless coverage that enables security and compliance. Establishing a governance strategy, including assigning responsibility, is the first step. It must then be acted on, so that real feedback from systems and stakeholders can be acquired for iteration and improvement.