About security update of Mac OS

This is how it has been in the past.

The current version gets periodic updates that include security updates (e.g., 14.2) They have occasionally released supplemental updates (14.2.1) which can be security related but often bug fixes. Apple has also issued Rapid response updates for specific vulnerabilities.

For the previous two versions, Apple releases periodic security updates.

There isn’t a schedule for any of them.

This article states there are updates for Monterey and Ventura in the form of new Safari browsers. https://www.helpnetsecurity.com/2023/12/01/cve-2023-42916-cve-2023-42917/

These Discussions forums have Apple users responding where they can but Apple does not respond directly here, so keep in mind you will get users' responses to your questions.

See this page Apple security releases - Apple Support

As you can see, security updates to Ventura and Sonoma are not always occurring at the same time, so it appears that sometimes a security update is for OS 14 and sometimes for OS 13. Sometimes it seems to be for both. There may be technical reasons for that. I am running 14.2.1 on my laptop but also have an older iMac that runs Monterey (the latest MacOS it can run). That older Mac still gets security and OS updates. But sometimes not at the same time as the Sonoma Macs.

Without getting into specifics of Apple security update here, note that MANY companies have not yet 100% transitioned from Ventura to Sonoma. My employer, where we have over 3000 Macs, has begun transitioning all Macs to Sonoma, but it is a gradual process for us and many are still using Ventura (my work computer is still on Ventura, it will update to Sonoma sometime in February).

I think you need to consider balancing the risk of not updating right away to 14.2.1 versus the risk of disruption to your business by updating before your internal systems are compatible with a newer MacOS. Most stay on the latest version of the OS they can while working to prepare to move to Apple's latest and most current version.