Question: how often are aix patches released?
Answer: I don't know what your auditors want exactly but the IBM AIX update policy goes about like this: There are two maintenance cycles per year for AIX software maintenance. The major upgrade release is around February/March. The minor upgrade release is around August. IBM recommends to do those two updates.