Journal of Information Organization Lynn Ray 5 1 2015 http://www.dline.info/jio/fulltext/v5n1/v5n1_3.pdf Having different configuration management processes causes problems for organizations. The problem with different hardware and software configuration management processes is a lack of common methods and communication. A centralized configuration management process for handling all processes is necessary. Investigation of literature and common practices used in configuration management, security configuration management and patch management were examined. Also the author’s experience was used to bring out experiences and practices used. This paper describes the relationship of the configuration management, security configuration management and patch management processes. There is a direct relationship of all three concepts in managing security risk in an organization. It emphasizes the building of a strong configuration control board process with leadership to overcome the problems of separate management processes. The result is an improved enforcement method to standardize changes that could negatively affect an organization.