Here's an interesting bit on patch management. The story is about Memorial Hermann using Shavlik Technologies
to automatically monitor and apply software patches to about 750
servers. Sadly, there is no mention of anything they do to secure their
many medical devices (including servers) from malicious code.