1
Risk Management
medium
During a risk assessment of a distributed system, the ISSEP identifies that a critical cryptographic module is nearing its end of support and the vendor will stop issuing firmware patches. The module cannot be replaced before the next authorization cycle, but the system must continue operating. Which risk response best fits the ISSEP's role at this stage?