“It's a minimum set of hygiene that every team should think about as they're either working on a new development project or some added functionality to an existing product.”

Transcript evidence from Dave Ferguson -- The OWASP Top 10 Proactive Controls.