(Source: Reuters) A cyber security program without these components can expose a firm and its clients to … the installation of software patches to address security vulnerabilities.