User operating system patching occurs once a month, or when critical vulnerabilities have been announced; software patching is carried out with similar frequency.