Missing patch report

I am looking for help to create a report or a query that will show me all the missing patches older than 30 days.

This is to prove the PCI-DSS requirement:

6.2 Ensure that all system components and software are protected from known vulnerabilities by installing applicable vendor supplied security patches. Install critical security patches within one month of release.

Any help is greatly appreciated.

Thanks in advance,

Lars