“Depending on the maturity level, then I will decide, okay, we should have this and this in place.”

Transcript evidence from Jahanzeb Farooq -- Launching and executing an AppSec program.