Special Publication SP800-40 version 2 is 75 pages of creating a very robust Patch and Vulnerability Management program.
Not to fear, the last 25 pages of it are Appendix. Glossary, Index, and...
Appendix D - A great list of resources with websites!
http://csrc.nist.gov/publications/nistpubs/800-40-Ver2/SP800-40v2.pdf
