Security team? We don't even have an IT guy. That's what small business is like. Everyone pitches in, and to some extent, everyone has to know a bit about everything.

In this case, that includes keeping up with the latest updates when they come out, looking up each KBnnnnnnn marked as a security patch, and checking whether it looks good before deciding whether we should install it. It's not rocket science, it's just more difficult than it ought to be since Microsoft stopped putting any helpful information directly in Windows Update. It's still far less hassle than either jumping through Enterprise hoops or experiencing downtime because a Windows Update broke something important and we couldn't block it.