Security patches are applied based on the vulnerability management policy. All such patches are installed within 30 days of being available.