You know about endpoint security and network security. But it’s time to pay far more attention to software security, according to ESG.