That goes totally against the requirement for being Cyber secure. Our Cyber Essentials accreditation in the UK which demonstrates our commitment to properly adhering to GDPR states that all updates to OS, firmware should be installed within 14 days of being published by the software manufacturer.