Cisco ISE Windows update remediation process

I am planning on implementing Cisco ISE. There’s no built in process for remediation of missing windows update patching. I am currently using “start a program” and passing windows update command through command line. Do you have a simpler way that streamlines windows updates? Would love to hear how others are getting this done