At a board meeting, the topic of an old isaca video

Full Certification Question

At a board meeting, the topic of an old, integral business system comes up. It's highlighted that this system, although vital, falls short of the current security benchmarks. As the information security manager, you have to propose a solution to mitigate the security lapses without interrupting crucial operations. Which strategy would be the most apt in this scenario?