When should a system have OS and application patches installed to prevent it from becoming vulnerable?

Software vulnerabilities may be fixed by operating system (OS) and application patches, which should be installed as soon as they are available. In a corporate environment, it is recommended to test them in a sandbox first to prevent any problems. The Windows Update utility on a Windows PC is used to manage the process.