The Canadian Centre for Cyber Security recommends automatic updates and patches for firmware, hardware, software, and operating systems. This is especially important for internet-exposed services and systems. [35]
https://www.cyber.gc.ca/en/guidance/cyber-security-hygiene-best-practices-your-organization-itsap10102