patching cadence security scorecard