Security updates deemed necessary will be applied to test as soon as possible. Service owners are notified to review the updates and given 24 hours to report any problems. After 24 hours, or as soon as service owners give the ok, the same updates are applied to production (outside of the normal 8am - 5pm, Monday through Friday service window unless it is decided it is critical enough to do it during).