How to develop a Patch and Vulnerability Management Program for your organization? Address Mission Statement

Method of Identifying Vulnerabilities, patching, prioritizing and risk rating

Method of Evaluating Vulnerabilities

Method of Treating Vulnerabilities $($Remediation$/$Mitigation$/$Acceptance$)$

Vulnerability Management Standards

Reporting of Vulnerabilities $($to whom, SLA$$s$?)$ and

Overall address how the steps of patch management and patch prioritization flow in your program?