Document all risks then turn it into $$$$. Upper management understands everything in terms of dollars. For example, if you are in e-commerce, how much would it cost per hour if your web site were compromised?? At my last company, it was something around $80k per hour if the financial system was down.
Good luck.
Mike
-----Original Message-----
From: Bill Husler [SMTP:[EMAIL PROTECTED]]
Sent: Friday, April 14, 2000 7:57 AM
Cc: [EMAIL PROTECTED]
Subject: Off Topic: Upper Management decision making
Has anyone here had occasion to face the situation where Upper Management decides
to move forward in a direction against to the recommendations of the group
responsible for data security disregarding their concerns? If so, what did you do
about it? Did you write it up and ask them to formally acknowledge their
acceptance of the exposure? What form would this document take? Any examples?
Bill
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
