Refactoring
Logging. What is a log? What gets logged? Logins / logouts Privilege escalation Security relevant events.