This message was deleted.

Recently, I heard from friend (he’s working for one of the global telecommunication companies) that patching is done only every 1-2 years because the support people are afraid to touch the environment. It’s hard to believe but it’s true 😖

Been at places like that before, but here it's 3 weeks or so for the entire environment to be current. Depending on the severity of the issues we have been patched same week, but normally go through a test cycle.

Where I used to work, it was done monthly so that evereyone knew when they could expect some downtime. VDI instances were all non-static, hence were re-created from new global images. In case of a concerning vulnerability, updates got pushed out as necessary to secure the environment as soon as possible. And, yes, this was first tested out in a QA environment before general distribution.