A high-risk issue is discovered during an information security risk assessment of a legacy application. The business is unwilling to allocate the resources to r...