Discuss web applications and risk to an organization. Include at least three examples of where web applications were compromised (such as the SQL injection hack at Qatar National Bank), and how security teams can assess and mitigate the relative risk of insecure web applications.