At a minimum you need a way to collect information from each workstation for all of the installed programs and patches/hotfixes installed. There are tons of co

At a minimum you need a way to collect information from each workstation for all of the installed programs and patches/hotfixes installed. There are tons of companies that sell software that does this out of the box, usually either with an agent installed on each workstation or a single server sitting on your network that uses an account with the necessary permissions to remotely grab that info. Once you have the data you can run reports to see what the worst offenders are and perform corrective actions such as updating software. If you want to do this for a small company like yours look into setting up a Wazuh server since it’s free and open source. For large corp environments there is software that can automatically patch out of date software but the costs are high and you have to be extremely careful because these process can occasionally break an end user application.. Usually there is always some sort of change management process that has to be followed for that for obvious reasons.