What is an appropriate frequency for updating operating system (OS) patches on production servers?

A. During scheduled rollouts of new applications

B. According to a fixed security patch management schedule

C. Concurrently with quarterly hardware maintenance

D. Whenever important security patches are released

Explanation:

Patches should be applied whenever important security updates are released. They should not be delayed to coincide with other scheduled rollouts or maintenance. Due to the possibility of creating a system outage, they should not be deployed during critical periods of application activity such as month-end or quarter-end closing.