A patch management policy is a set of working procedures that can be implemented through patch management software. It applies to different categories of software, such as applications or operating systems, and can implement patch rollout by device type, make, model, or operating system. The patch management policy dictated when and how each arriving patch is applied.