One of the most important concepts in security is "Trust, but audit." Auditing provides a critical layer of protection against human error and omission. In the case of software update management, auditing enables you to verify that updates are distributed correctly and are not removed after distribution.
Microsoft provides the following tools for auditing software updates and the software update process:
WSUS WSUS enables you to view which updates have been distributed to which computers. To detect updates that are removed after distribution and new computers that do not have the proper updates installed, use WSUS reporting in conjunction with one of the other tools in this list.
Configuration Manager 2007 R2