Risk management

policies & procedures

access control

audit & monitoring

training& awareness

incident response

Injection Attacks

Broken authentication

misconfiguration

unpatched software

social engineering

supply chain attacks

insecure access control