How do you handle a situation where a project is behind schedule and security requirements are still incomplete?
