“It's not about the beauty or the excellence of technical fixes or issues or architectures, I have to measure that against or weigh that against the business and say, sometimes I have to say, I'm going to have to accept that risk for a period of time, right?”

Transcript evidence from Derek Fisher -- The Application Security Handbook.