Describe a time when you had to manage a security risk in a project. How did you approach it?