Watch this video on YouTube
Risk acceptance of an exception to a security control would MOST likely be justified when: