Key management: Key management introduces additional risk, such as custom implemented key management infrastructure that does not address the right issues can leave a system exposed while providing a false sense of security.