As organizations worldwide increasingly rely on software controls to protect their computing environments and data on premises and on the cloud, the topic of software security grows in importance. The potential costs associated with security incidents, the emergence of increasingly complex regulations, and the continued operational costs associated with staying up to date with security patches all require that organizations give careful consideration to how they approach software security and assess the security practices.