Scenario: What if a client asks you to save money by cutting out some of the security measures that you recommended, yet your analysis of the client's security needs shows that sensitive information will be at risk if you do so? You try to explain this to the client, but he/she is adamant. Alternative 1: Should you go ahead and configure the network ina less secure manner? Alternative 2: Should you "eat" the cost and install the extra security measures at no cost to the client? Alternative 3: Should you refuse to do the job? Would it make a difference if the client's business were in a regulated industry, and implementing the lower security standards would constitute a violation of the Health Insurance Portability and Accountability Act