Deciding where it exists. Deciding what to do about it. Convincing non-devs that it's worth doing. And then actually fixing it.