@o.lahmar, the only way to really do what you're looking for is to set the policy to a frequency of "Ongoing" and set the scope to a Smart Group for Macs that don't have that update or updates installed
You can use criteria like Application Title | has and Application Version | is not, or use Package Receipts | does not have or an Extension Attribute value, just as a couple of examples. As long as any Macs that do not have that update installed land in the group, the policy should run again the next time the Mac checks in., and keep trying until it falls out of that group.
That said, there is a feature request already to change it so policies run to completion if it fails. Right now setting any policy to a once per computer execution means that it will only try once. If it fails for any reason it won't make another attempt. I can't search for that feature request right now, but look for it. You'll find it.
