The ATMs of your bank still run the Windows XP operating sys…

The ATMs of your bank still run the Windows XP operating system. In 2018 Microsoft decided to stop supporting Windows XP. As a consequence, no more security update will be released for it. Because of systemic effects, you could intervene on any one of the four components of the information systems to address this problem. Which intervention would be most appropriate for the bank in this case?