Security patch management strategy development