Mission-critical systems can’t just be switched off to apply security updates — so patching can take weeks if not years.
Source: Threadpost