Heads up: if you (plan to) use the Security Only updates (from the update catalog) to avoid 'functional' overhead, be advised that some Security Updates are Superseded by the Security Monthly (as such have the Supersedence tag in SUS etc.) and some are not Superseded (=still needed) by the Security Only updates. This is also true for the .NET updates. Also some functional updates are Superseded by the Security Monthly updates that you still might like to have next to your Security Only updates, such as the Time zone updates. Also: Security Monthly are cumulative, the Security Only are not.