Ensuring you never mess up is hard. Setting things up to minimize the impact of mistakes is a lot easier. This is true beyond software development, but specifically for software, this means you should: - set secure and sane defaults - make it so you have to opt out of security checks, not opt in to them - have a security checklist as part of code reviews.