Every year, software security becomes more complex. New attack strategies are discovered, old ones are rediscovered, and the taxonomy of insecurity balloons exponentially. How can someone manage all of this information? Resonant Core’s application security specialist, Scott, proposes three distinct areas where the lion’s share of security problems exist, with real-world examples from software we use every day. He also discusses the role of compliance audits as a baseline and the importance of security engineering in business.