For public-facing web applications, address new threats and vulnerabilities on an ongoing basis and ensure these applications are protected against known attacks