If you identified a major vulnerability in a system during a risk assessment, what steps would you take to mitigate this risk?