Update production and development sites with every Drupal update when it's published, after testing it and backup the site. 
All maintenance actions are done on time which is with minimal traffic.