Risk Acceptance: How to Document a Vulnerability Your Client Won't Fix

Sooner or later a client says no. The finance system only runs on an old version of Windows. The vendor won't support the patch. The fix means a weekend of downtime they can't afford this quarter. Tha