Hello,
considering the update, it is better to upgrade to upto date.
i mean in terms of rebuild versions
and considering the History of builds, it is safe to have a backup and as an alternative, you can rely on the Microsoft website for auto backup.
you should use Microsoft Windows Server Update Services (WSUS) for Offline systems. You pair an online and an offline system together, approve the updates on the online one, allow it to download, export from the Online, import into the Offline, and your systems connect to the Offline and pull and install and report back to the Offline WSUS server.
It's so much easier than manually figuring everything out.
follow the steps mentioned in the below link
If an Answer is helpful, please click "Accept Answer" and upvote it : )
jainth S