The CISA Known Exploited Vulnerabilities catalog can help small businesses prioritize urgent patches. Here is a practical weekly workflow for KEV triage, mitigation, and post-patch checks.