Patching system best practices suggestions

Am I asking for something obvious? Has someone something to share about this?