Are you certain the managers know about this and push back or have you heard this second hand? I ask because I am the founder of a saas application (see my prof

Are you certain the managers know about this and push back or have you heard this second hand? I ask because I am the founder of a saas application (see my profile for details) and one of the major concerns before buying from prospective and current customers relates to security. A lot of time is spent making sure the application is developed with the best security practices in mind. We take it very seriously. Here's the kicker: the app is only used to store test/fake data, we do not handle any production data or any of their customers' real data. Even so security is a major concern. The fact that your application is handling customer's real sensitive data, including financial data and communicating with financial entities makes me think your management should be making security a top priority, otherwise how would their customers have any faith in them? I would bet the management cares, and if they don't then there are serious problems with the company and you may want to consider leaving.