Re: Senior management really concerns about security?

[romain <r () fuckthespam com>]

You may try to find some papers about the return on investment about security.
I think Intel published such a white paper not that long time ago 
(http://communities.intel.com/openport/docs/DOC-1279)... but I guess there are not many 
others.

hope this help,
good luck,
r.
  http://rgaucher.info

acwang0048 () gmail com wrote:
> Hi all,
>
>
>
> Just want to ask whether you guys have encountered some unreasonable requests from your senior management (e.g. ceo) whereby you as an IT personnel understands the potential security risks involved. But then, when you try to explain the security risks or consequence to them, they won’t listen and just tell you they need this because of business function. 
>
>
>
> At the end, you can’t do anything but to adhere what they request. But then, this leads to so many exceptions created for senior management. 
>
>
>
> Well, this is what I am currently facing!!!
>
>
>
> Anyone has a better way to deal with this?
>
>
>
> Cheers,
>
> Wang