- defining goals (policies)
- tracking measures (compliance)
- apply updates (remediation)
this process implies the risk of having invisible virtual machine (powered off VMs and templates): VUM takes care of those and patches them.
Basically VUM can patch ESX hosts, Microsoft VMs and Linux RHEL VMs; the infrastructure to get VUM working is Virtual Center + Update manager add-on. VUM let you create the baseline securities standard for your enterprise and applies it interactively or on a schedule basis.