Describe a situation where you had to make a critical security decision with incomplete or ambiguous data.