Steps to guarantee both physical and virtual machines

What steps would you take to guarantee both physical and virtual machines are patched in accordance with regularly scheduled releases? Be sure to defend your thoughts with reference to the readings.