You need to know the risks that specific security threats pose to applications, including botnets, DDoS attacks, hacking and malware.

​

You need to know how both physical security mitigations (e.g. biometrics, locks and RFID) and digital security mitigations (e.g. encryption, firewalls and anti-malware) protect application software against threats.