
I authored and structured a formal Software Patch Management Policy for SnowBe Online, defining asset scope, patch prioritization, testing, scheduling, exception handling, and enforcement to reduce vulnerability risk across cloud, endpoint, and point-of-sale systems.
Skills demonstrated: patch management program design and governance; vulnerability prioritization using CVSS scoring; asset inventory and lifecycle management; change and configuration management; risk mitigation and exception handling; and compliance monitoring and enforcement planning.
Frameworks and tools used: CVSS v3 severity scoring, CIS Critical Security Controls (patch management alignment), the Cybersecurity Capability Maturity Model (C2M2), Remote Monitoring and Management (RMM) concepts, and AWS cloud security considerations.