Caution
I agree with the comments here although I have worked with fellow techies take things way to far in the caution direction leading to nothing getting done and being stuck in a perpetual risk / change loop. While things should be planned, risk is not the reason to not do something.
If you don't do something, you end up with systems that are 10-15 years old because they just run and you run out of support. Then you have major upgrade issues as most of the time you have to step upgrade to versions that also aren't supported.
In my mind it is all about balance.
Biting the hand that feeds IT
