More than a quarter (27%) of enterprise IT departments in the US are forced to wait at least a month before installing vital security updates, due to budgetary restraints and overly complex infrastructures.

https://www.securitymagazine.com/articles/89355-of-us-enterprises-take-months-to-install-vital-security-updates