Software companies large and small make these kinds of judgments on a daily basis during both the development process and the life span of a deployed product.

FORBES: How Bad Assumptions Are Making Software Less Secure