Have on-call sysadmins or have them work in a three-shift schedule. That way there's always someone there to fix stuff as it happens, including deploying security patches or worst case taking affected systems offline until they can be patched

This used to be common before devops and cloud took over. Looks like it might make a comeback. Maybe with a new fancier job title