Which of the following will inhibit remediation when attempting to resolve a vulnerability?
Legacy systems are explicitly identified as a factor that inhibits vulnerability remediation because they frequently cannot be patched — due to lack of vendor support, unavailability of updates, or the risk that patching would break critical, unsupported functionality. Organizations often must rely on compensating controls (such as network segmentation or enhanced monitoring) rather than direct remediation, and the cost or business impact of replacing these systems further delays fixing the underlying vulnerabilities. This is a recognized inhibitor alongside MOUs, SLAs, business process interruption, degrading functionality, and proprietary systems in vulnerability management guidance.
Community Discussion