Imagine you are tasked with improving the security posture of a legacy system at New York Power Authority. What steps would you take?
