Discussion on:

Lock it down: Use the OWASP Top Ten to secure your Web applications -- Part 1

What vulnerability on the OWASP Top Ten List, or your own list, do you designate as your organization's priority? Why?

I think what is critically important to note is that the ?bad guys? are always looking for the path of least resistance. In other words hackers are evolving their methods continuously since infrastructure perimeters have been locked down for the most part. OWASP is a great starter and for most organizations a must read to at least educate themselves on Web app security. Just remember, the target will keep on moving!