Patch and change management often takes place from a central location. Its exposed position means it is particularly threatened. Should attackers manage to take over the servers involved, they will be able to distribute manipulated software versions simultaneously to a large number of IT systems via this central location. Further points of attack are often created by the fact that these systems are operated by external partners (outsourcing). Maintenance access maybe also be available that allows attackers to access a central server for distributing changes.