Not sure of where to go, I am sure that TechRepublic has more information on the subject under the IT manager tab. But, a good methodology would be to first identify at which level your servers are at, determine which servers need to be service packed, determine if there are any known issues with running applications and the service packs you want to apply, then create a lab environment to fully test the patches and generate a gameplan on upgrading the service pack / patch level of your servers. You should primarily go with the least critical servers first just in-case you experience any knew and unforseen problems. You may want to check out the Network Administrator's resource guide found here
https://www.techrepublic.com/trcatalog/browse.jhtml?contentPage=itmanagement&topic=IT+Management. Just remove any spaces in the URL. Hope this helps.....