Security Think Tank: Focus on high risk by automating low-risk patching

How should organisations address the need to keep software up to date with security patches without it costing too much or being too labour intensive?