https://ones.com/blog/knowledge/maximizing-software-security-essential-practices-risk-mitigation/