Report Offensive Message

Putting aside politics for a moment, there is always a balance between security and operational efficiency. The job of a security professional is to identify risks and make recommendations to management. Business managers as the owners of the data must make the decision whether to reject, accept, transfer, or mitigate the risk. Where was management in all this?