Staged rollouts: updating branch devices without stopping the branch

Patch windows are an operations problem

A teller device that reboots mid-transaction is a customer-facing incident. Update timing is therefore an operational decision, not just a security one.

Conditions worth enforcing

• Install outside working hours only
• Require mains power and Wi-Fi
• Stage by region or business unit
• Keep a pilot group one step ahead

Data costs fall too, because nothing downloads over mobile networks.