There is no process that can prevent unknown failure modes. Legacy software is almost always going to have issues, and some use complex frameworks knowing full

There is no process that can prevent unknown failure modes. Legacy software is almost always going to have issues, and some use complex frameworks knowing full well they have heavy maintenance burdens. Saboteurs come from all skill levels and backgrounds. Integrating accountability in the development and deployment process is wise. Most modern "Hackers" are just the sane old cons repurposing common auditing tools to check for known CVEs. Most others simply don't care about some obscure website. When you catch unknown people poking hardware in COLO data centers... the real problems start to become apparent. With enough coffee and doughnuts anything is possible. =)