How often should security updates be installed?

Apply routine updates on a managed schedule and expedite actively exploited vulnerabilities.

Answer

Operating systems, browsers, business applications, network devices, and security tools should follow a documented patch cycle. Critical or actively exploited vulnerabilities may require accelerated deployment after compatibility testing. Unsupported software should be upgraded or isolated because it no longer receives reliable security fixes.