Recent penetration testing of an organization's software has identified many different types of security risks.

SIEM software is producing faulty alerts.

Threat modeling was not utilized in the software design process.

The configuration management process is not applied consistently during development.

An identity and access management (IAM) tool has not been properly integrated into the software.