...
One of things that is super important is not to run out of date technology. In software we have what are calledzero day vulnerabilities. This is when a vulnerability is discovered in a piece of software and until that software is updated by all customers then everyone is vulnerable to that problem.
For instance like every other technology company in the industry (Oracle, Microsoft, Google) we use the openssl library in our product to implement security protocols. If your organization is handling confidential data then one of the biggest vulnerabilities you have is running out of date versions of openssl with known security holes.
...