Applying risk reduction and security maturity strategies. Veracode’s study found marked differences in how organizations manage security debt, with big gaps between the best and worst performers.