Argumentation for installing updates on the OS

Question

System administration

Greetings.

The question, in fact, is how to beautifully and correctly argue for a non-IT specialist - a client, a manager, the need to install updates both on workstations and on internal servers.
I am an administrator and I understand why this is necessary, but I still can’t create beautiful convincing formulations - even my IT-savvy boss ignores installing updates on internal servers, motivating this with the rule “it works - don’t touch it.”
Thanks for the help.

Answer 1

If you ask such questions, you are simply incompetent as hell. Ask your management to sign you up for ENI courses

Answer 2

Or maybe the truth “works - do not touch”? At least in those cases when it does not concern critical holes in security, reliability, etc. - in these cases, by the way, it is not necessary to invent an argument.

Answer 3

Works do not touch it is absolutely correct. Plus, if the system is inside the security perimeter, updates are generally not needed.
If the system is vulnerable, then an update deployment policy is needed that provides for actions to test updates, deploy, and rollback if necessary.
But first you need to answer the question "why", and not the first question about the update, but all the other answers. Only then will it become clear why updates are needed in this particular case.