“Then, but the last two-thirds was what are the best practices, proactive controls, like what are the things that you guys can do to make sure to do it right from the first time, from the start.”

Transcript evidence from Jet Anderson -- The AppSec Code Doctor.