Skip to main content
Software Updates

Cyber Essentials — Software Updates

The Cyber Essentials Software Updates control requires that all software — operating systems, browsers, apps, and firmware — is kept up to date. Known vulnerabilities in unpatched software are one of the most common routes attackers use to gain access to systems. Cyber Essentials requires that critical patches are applied within 14 days of release. These guides cover every Software Updates requirement.

What this control covers

  • Enable automatic operating system updates on Windows, Mac, iOS, and Android
  • Keep your web browser up to date — one of the most frequently exploited apps
  • Enable automatic firmware updates on your router
  • Maintain a monthly routine to update all apps that don't auto-update
  • Establish a formal patch management process for business devices (14-day CE requirement)

Software Updates Guides (6)

Track your Software Updates progress — free

Create a free account to check off tasks as you complete them and see your overall Cyber Essentials alignment score.

Start your free security check

Other Cyber Essentials Controls