how often to load group and cume ptfs v7r5

I know this has been discussed many times, over several decades, but it is
an ever evolving world both in and outside our networks, plus each and
every shop has a different environment.

The real core question is how comfortable are people with IBM's groups
hiper/security/java/db2/tcp to download and install often (at a minimum
monthly) with quick review of cover letters.
No test system. Small shop, lights out computer room.
Heavy user of https (cgi), both local and www.
Many sftp daily with outside vendors, all initiated from system.

Need to recommend an update to the schedule.
Cumes I've always waited a good month or two before loading.
Groups had been quarterly but as someone recently mentioned- how to defend
not installing an available fix...

Jim Franz