Watch this video on YouTube
In this scenario, where the senior management chooses to accept the risk related to a potential attack, the best thing for a risk practitioner to do is: