An affair occurred today. A defect was found in a web system ordered by an institute tightly concerned with my office, which was made by a rival of my company. The defect is difficult to find, but the defect enables a cracker to steal important data and to corrupt data. Recently I studied about the defect as a study for a qualifying exam. Before the affair, I did not regard the qualification effective for actual work.