Consensus on Patching

I am writing an infrastructure patching plan and while I tend to roll security updates and bug fixes out on a quarterly, I can find no references to back up my activities. How often do you patch your vSphere infrastructure?