Your board may not sign off on exposure that a feasible mitigation could reduce. The slowest dependency in your migration should not set the risk timeline for the ...