A ISPConfig update restarts all services, thats moost likely the vreason for the decrease as the memory was not consumed by ispconfig.
Yes. One of the services that is run on your server and that gets restarted on update. This are apache, mysql, php-fcgi processes, postfix, courier or dovecot, pure-ftpd, amavisd-new, clamav.