this provides an effective focus for starting more security-focused risk mitigation efforts. A more comprehensive list
of programming errors, specific to the C, C++, and Java programming languages can be found in The CERT C Secure
Coding Standard [Seacord 09] and on the CERT Secure Coding Wiki.
Some lists have been adopted by organizations as mere checklists, contributing to negative validation, which happens