You can't rip and replace a 15-year-old system overnight but you also can't leave it unsegmented. Zero-trust principles applied incrementally.