Balancing the protection of established systems with the need to counteract emerging cyber risks.