How do you handle a situation where a stakeholder disagrees with your risk assessment of a vulnerability?
