During a vulnerability review, a security analyst finds that a business-critical inventory application runs on an operating system version that the vendor has declared End-of-Life (EOL). A newly disclosed remote code execution vulnerability affects this OS, and the vendor has confirmed no patch will be released for the EOL version. Migrating the application to a supported OS will take three months due to compatibility testing. What is the most appropriate patching-related recommendation to make in the interim?