software? (e.g. threat modeling, automated code analysis (static or dynamic), etc).
d. Which security controls have been utilized to mitigate specific problems (e.g. authentication,
authorization, cryptography)
Key Practices for Mitigating the Most Egregious Exploitable Software Weaknesses 41