Problem
You are a security consultant for a new client in the healthcare industry. You have been asked to design a web solution that will expose personal private information in a web portal. Unfortunately, they are rejecting some of your recommendations due to cost overruns. You feel strongly that the system should be more secure and have explained the risks to your project manager. Should you refuse to build the system as they requested? And if so, under what conditions?