The second ColdFusion patches are released by Adobe, our Sysadmin team are alerted by Email.
We have procedures in placefor Rolling out these patches, what needs to be updated changes depending on the Patch that needs to be rolled out.
Sometimes patches is straight forward, other times WebServer connector between the IIS (Web) and ColdFusion (Application Server) also needs to be upgraded.