Risks Involved in Misconfiguration and Out of Date Software

o  Open ports, services, patches not up-to-date

o  User authentication and access control policies

o  Monitoring of logs

o  Access to databases and virtual machines.

Application Design and Security

o  Use HTTPs and SSL

o  Encrypt secure data

o  Perform penetration testing.