TO: YOU AS CISO

FROM: Michael Davenport, Director of Software Engineering

SUBJECT: Software Assurance process

I heard from out software engineers that you are implementing some new software assurance process for our developers. Can you better explain this and justify costs? Why do we even need to do this if it is going to cost us more money (and time)? I need clear answers before my engineering staff can proceed with any changes to our processes. Senior management is not going to be appreciative of the added costs and time needed to complete projects.