Everything from endpoints to network software to IoT devices should be patched and updated to prevent or minimize the chance of a threat actor exploiting a vulnerability  In an ideal scenario, an organization’s in-house security team implement all of these and other security measures.