A financial services firm operates a legacy peer-to-peer file-sharing feature that generates minimal revenue but has been repeatedly implicated in data leakage incidents. The residual risk far exceeds the organization's risk appetite even after multiple control enhancements, and no cost-effective mitigation exists. The business owner confirms the feature is not strategically important. Which risk response is MOST appropriate for the information security manager to recommend?