“Then we would set up these weekly sessions where we would work at a mentorship capacity, where they would bring that filtered list of user stories, not all of them.”

Transcript evidence from Farshad Abasi -- Three Models for Deploying AppSec Resources.