Patching of applications and systems

The business regularly scans and patches internet facing applications and operating systems for security vulnerabilities (at least within 2 weeks of release).