You probably don't have to stop the service to mitigate the threat. The problem is that you need to KNOW there is a threat to mitigate it.

Let's look at it this way, you go to the doctor for a check up and he doesn't tell you anything....you could be fine or you could have cancer, but you'll never know because he wants to make sure you are "secure."