The level of security testing depends on the business risk and the importance of the data that will be stored within the application. For example, if payroll data is stored in an application and a hacker can access it, it would be considered a high level of risk due to the potential financial damage that could occur if someone were able to steal this data.