Risk Assessments

Is there a need for risk assessments?

You have been asked to act as the security representative on a high-profile B2C e-commerce project. After examining the requirements provided by the project manager, you submit your recommendations for ensuring that the project is securely implemented. A few weeks later, you find yourself in several meetings in which your concerns are called paranoid, expensive, and unnecessary. As if things are not bad enough, the vice president overseeing the project requests justification for each of your recommendations.

You know intuitively that security problems will crop up if your recommendations are not followed, but you are now forced into a situation where you need hard facts to back up your gut feelings. How can you quickly and efficiently provide the justification the VP is requesting? What could you have done to avoid the situation altogether? 200 wrd Cited within text