How do you prioritize vulnerability patching when dealing with legacy systems that cannot experience any downtime at National Grid?
