Provide an example of an occurrence where a patch could not be installed on all

Provide an example of an occurrence where a patch could not be installed on all enterprise systems. Describe the compensating controls you would recommend to protect your systems given that the patch would not be used on your production network. Research zero-day patching and explain when this would be utilized in a production network.