What is an appropriate frequency for updating operating system (OS) patches on production
servers?

A.
During scheduled rollouts of new applications

B.
According to a fixed security patch management schedule

C.
Concurrently with quarterly hardware maintenance

D.
Whenever important security patches are released

Explanation:

Patches should be applied whenever important security updates are released. They should not be
delayed to coincide with other scheduled rollouts or maintenance. Due to the possibility of creating
a system outage, they should not be deployed during critical periods of application activity such as
month-end or quarter-end closing.