Protect the software that runs the business

Recognize software as something security must protect and something that can create risk. Spot how apps, websites, APIs, operating systems, and cloud services can fail through bugs, unsafe settings, or unintended features.