What is considered best practice when maintaining and distributing hardened operating system VM templates?

I have created several hardened image templates for my company. These have been hardened according to NIST and CIS, and then the VM template generated. What is the best practice for maintain and distributing these templates to ensure users always have the most up to date template?

Right now for example, the images are hosted on sharepoint and every month I run the templates, update with the latest patches, and push back to sharepoint. This doesn't seem ideal.

Looking for …

best practice cis cybersecurity generated image nist operating system practice system template what is