What needs to be constant and up to date is reviewing the new patches and which ones can be released and not locked. The versions that are not locked can be a

What needs to be constant and up to date is reviewing the new patches and which ones can be released and not locked. The versions that are not locked can be a test or dev environment that constantly updates and checks for errors. Security threats are a thing, how we do and don't use technologies as well which ones can also factor in to how much is exposed.