The process of identifying, prioritizing, acquiring, installing, and verifying the installation of patches, updates, and upgrades throughout an organization.
Sources:
NIST SP 1800-31B
NIST SP 800-40 Rev. 4