Ok, I will perform a security review when requested. I will upload the security review to a folder under
the briefcase of the project. I will add a comment to that file stating 1 of 2 options:
Reviewed. There are no IT Risks associated with the implementation of this project.
Reviewed. The following risks should be noted: ---I will not consider deliverables as part of the
security review. I do understand that we/the ISO do not approve that a project close.