[John Rogers]

I would try to keep our Oracle database servers up for at least a year, longer if possible so the "query brain" would have plenty of data to work with. Oracle would send out their security updates every quarter but thankfully they never applied to anything we had running. The servers were on their small subnet and never had issues with the stuff that Microsoft would try to push out on us and our Sun servers could be patched without having to reboot.