Security Patching on SQLServer 2008 Active/passive cluster server

Hi All,

I need a help and guidelines to do Security Patching on SQLServer 2008 Active/passive cluster server.

1.Will Security patches   come with Windows patches or the different set of patches ?
2.If Replication configured on the server what are all steps we need to take care?
(Before after patch applies)

Please provide steps and best practices to apply Security patches.

Thanks in advance.

---

SNIVAS