Ecommerce has become an integral part of critical business processes throughout organizatuions large and small. The risks to sensitive assets remain poorly understood by managers and other key stakeholders. Soultions are found in the application of protection measures to reduce risks and potential losses. Making systems safe enough means mitigating risks to the point they become acceptable and ecommerce becomes an activity that can be engaged in on a broad basis without excessive fear of undesireable outcomes.