Web application security is much more than an IT problem. It can become a significant business problem if not handled properly.