Apache in enterprise, patch management

I was wondering how everyone else manages patching/upgrades for apache.

Latest doesnt mean greatest, we typically dont install the newest patches for our OS's. We typically run 3-6 months behind, to let fixes get fixed before installing them.

Does anyone here have a written detailed plan on managing this for apache in enterprise?