You are an information system auditor of HDA Inc. You are auditing a software system that is still in regular use but is out of date and no longer supported by the manufacturer. The auditee has stated that it will take six months to update the software to the current version. In this scenario, what would be the most effective approach to mitigate the immediate risk associated with using an unsupported version of the software?