IT Security questions

Please answer both questions with 300 words or more with refs.. thank you

1. Pick a coding practice ( e.g., Input Validation, Error Handling), describe in your words what the practice is, what vulnerabilities the practice can minimize or eliminate or abuse cases it can prevent. 

2. We will focus on software maintenance or sustainment in this conference. You need to maintain a formal process during maintenance for activities that include:

• Sustaining quality and security in the code
• Doing software upgrades (upgrades of OS, DBMS, etc.)
• Performing validation and verification activities
• Incorporating new developers into the project
• Incorporating new features
• Identifying new threats
• Impact analysis of new threats
• Fixing vulnerabilities discovered in the field
• Controlling change
• Assuring changes

For this conference, pick one area from the above list, explain what it is and how you will perform the activity..