We usually install non-critical updates during non-peak hours, generally early in the morning, so as not to interfere with ongoing operation (if this is even necessary at all). We announce these kinds of updates by e-mail.