Best practices for developing secure software; coding techniques for data validation, session management, exception handling, data encryption; configuration techniques. Mitigating security risk from external and internal sources.