Prepared for March edition of OWASP Montreal: Ask NorthSec Panel