Research the legal issue of whether a company can hold a software vendor responsible for security vulnerabilities. If you were to create a law that protects both individuals and companies against vulnerabilities resulting from insecure software, what would it include?