At my previous organization we applied the patches on a monthly basis, only the critical patches were applied, we first applied them to our CRP servers and had the JDE team test for a week, if we found then we tried to identify the patch that created the issue, if not issues were found then the patches were applied to the PROD servers the following week, during the maintenance window.