The best policy patch for me is test the latest patches on non production environment before apply them on production... and of course, read the release notes before plan the upgrade, because some patches apply only for specific problems/configurations that may not apply for you.