Run a proof of concept, to assess the impact on your organisation

[marietheresa]

It's easier to convince managers, developers, and everyone else that you are facing a problem if you have the numbers. So, if you can, take your problem and assess how much it affects your organization.

Let's say you're trying to make an argument for introducing a security scanning tool, then do a proof of concept. Turn it on and see what happens!¹ It's just so much easier to make a compelling case when you have the facts. So do yourself a favor (if you can) and get some.

Footnotes

1. But actually don't just turn it on. Talk to people before hand, let them know it's happening. And figure out what to do with the findings that will inevitably pop-up, while you're "just trying it out". ↩