Answer Description
All of your best laid efforts in controlling the patching process will be for naught if you leave automatic Windows Update on! Disabling this will allow for you to control when patches are released to clients and enable you to test patches in your representative sample of clients in the organization prior to overall roll-out.
Wikipedia
A patch is a set of changes to a computer program or its supporting functionality designed to update, fix, or improve it This includes fixing security vulnerabilities and other bugs, with such patches usually being called bugfixes or bug fixes Patches are often written to improve the functionality, usability, performance or security of a program Patches may be installed either under programmed control or by a human programmer using an editing tool or a debugger They may be applied to program files on a storage device, or in computer memory Patches may be permanent (until patched again) or temporary Patching makes possible the modification of compiled and machine language object programs when the source code is unavailable
Patch_(computing) - Wikipedia, the free encyclopedia