Security professionals have an obligation to communicate risks and recommendations to management, but the ultimate responsibility for protecting corporate assets......