Basic secure code training focused on developers would be a huge benefit for those of us working through SOC 2 Type 2 or ISO 27001.