Install on a test server. Make sure the app still works.
BACKUP EVERYTHING, inclusing system dbs.
Apply latest, test SPx
Retest application.
If something went wrong you basically have to rebuild the server to previous sp level and restore all the dbs. That last part I've never done so I might be missing a few steps.