Implementing vulnerability management programs - Adding security to SDLC processes - Training and awareness