SharePoint 2019 update best practice

Hi, I hope to get this answer. I manage sharepoint but don't manage the server and window patch. Sometime server team patch server and  it look like it also update SharePoint. I am trying to figure out what is the best practice around sharepoint patch? I mainly care about security so how often should i patch sharepoint and where to check for security update.  I heard there is window update and microsoft update.