CompTIA SecurityX (CAS-005) CAS-005 — Question 234

A security architect is analyzing an old application that is not covered for maintenance anymore because the software company is no longer in business. Which of the following techniques should have been implemented to prevent these types of risks?