During a risk assessment, management learns that a legacy system critical to operations has several known vulnerabilities. The vendor no longer provides patches, and replacing the system would take over a year and significant budget.
👉 As a security manager, what would be your BEST recommendation to management in this situation?
Think it through ...