Thanks for this article!

It reminds me that when thinking of security requirements, we need to go beyond simple login, but think about the larger issues faced by the corporation. Any project can become a security risk if we do not consider corporate security goals.

Beyond that, to convince high level executives of the need for corporate security, we have to speak their language. This should always be a goal – to speak the language of the stakeholder with whom we are communicating.

We can think of implementing corporate security the same as any other project we undertake – with stakeholder needs, requirements for the project, and end users who will have to deal with whatever solution we create.