Best practice security risk software