Nine security best practices every software leader should know