“You need to invest the time and the resources in any tool that you're going to use to tune it, to make sure you provide the best possible output for the developers to focus their time and the information that you're putting in front of them so you're not wasting their time.”

Transcript evidence from Chris and Robert -- The Activities of the Secure Development Lifecycle.