As an FYI... in the retail industry, patching is required per the PCI (Payment Card Industry) Standards. You have to have a good reason NOT to apply CPU patches.