A transport network company that provides private taxi cab services has a web application that allows customers to schedule appointments with their driver. The application runs on outdated software and represents a security risk, but the software is also critical for business operations.

The company decides to discontinue using this software given the risks that it entails, instead electing to run tasks manually using Excel spreadsheets.

What kind of risk response does this represent?