A financial services firm is decommissioning a legacy trading platform over the next 18 months and migrating to a cloud-based system. During this transition, both platforms will run in parallel. The risk team identifies that the legacy platform has an unpatched vulnerability that vendor support will no longer address. A permanent fix would require significant re-engineering of a system scheduled for retirement. What is the MOST appropriate risk response?