“The third model is the champion or deputy model where the AppSec team deputizes developers to do the bulk of the application security work, and the AppSec team becomes a resource and escalation point for more complex problems.”

Transcript evidence from Farshad Abasi -- Three Models for Deploying AppSec Resources.