Re: Senior management really concerns about security?

[Adriel Desautels <adriel () netragard com>]

Wang,
	That is not an uncommon problem. If you've made your CEO aware of the 
risk and he/she is willing to accept the risk, then you've done your 
job. If their decision comes back to bite them in rear later, its not 
your fault.

Regards,
        Adriel T. Desautels
        Chief Technology Officer
        Netragard, LLC.
        Office : 617-934-0269
        Mobile : 617-633-3821
        http://www.linkedin.com/pub/1/118/a45

        Join the Netragard, LLC. Linked In Group:
        http://www.linkedin.com/e/gis/48683/0B98E1705142

---------------------------------------------------------------
Netragard, LLC - http://www.netragard.com  -  "We make IT Safe"
Penetration Testing, Vulnerability Assessments, Website Security

Netragard Whitepaper Downloads:
-------------------------------
Choosing the right provider : http://tinyurl.com/2ahk3j
Three Things you must know  : http://tinyurl.com/26pjsn


acwang0048 () gmail com wrote:
> Hi all,
>
> Just want to ask whether you guys have encountered some unreasonable requests from your senior management (e.g. ceo) whereby you as an IT personnel understands the potential security risks involved. But then, when you try to explain the security risks or consequence to them, they won’t listen and just tell you they need this because of business function. 
>
> At the end, you can’t do anything but to adhere what they request. But then, this leads to so many exceptions created for senior management. 
>
> Well, this is what I am currently facing!!!
>
> Anyone has a better way to deal with this?
>
> Cheers,
> Wang