Think we patch monthly regardless in and outside of PCI scoped environments. The issue recently is that customers want even more frequent patches, like within a few days of the CVEs