Production delivery includes security updates and an upgrade approach under the maintenance agreement (MA) and shipped version (agreement governs). We recommend validating upgrades with regression question sets to reduce risk.
Other articles
Previous
(Security & compliance) Evaluation: How are access control and network boundaries defined? Can we restrict who can use it?
Next
(Security & compliance) Evaluation: Can you support security audits (vulnerability scanning / penetration testing) and vendor due diligence?
Related questions