Modernizing applications involves many concepts and technologies that are not always well understood, leading to poor application security postures.
In addition, solution architects and developers who create the applications often lack the knowledge and expertise to select and apply the required security controls.