How do you handle a situation where a system administrator or project manager resists implementing a required security control?
