How to update macOS Machines that does not have internet connection?

We have a secure environment with hundreds of Mac Mini machines. In this secure environment this Mac machines does not have access to the internet. We want to keep the machines secure with the latest updates. For Big sur and beyond we observed that Apple are not having available individual updates to download them and then install them on the offline machines. Which is the best way to keep this machines that does not has internet access, up to date with all the latest update? We have a lot of things configured on those machines so doing a fresh install of latest full operating system is not an option for us.

How to update macOS Machines that does not have internet connection?
 
 
Q