Because every IT risk creates some degree of business risk, it is important that CAEs thoroughly understand IT change and patch management issues. IT change and patch management can be defined as the set of processes executed within the organization’s IT depart- ment designed to manage the enhancements, updates, incremental fixes, and patches to production systems, which include: • Applic…