- Requirements
- Design
- Implementation
- Testing
- Deployment & Maintenance
- Shift-left security (earlier detection).
- Security gates in Agile/DevOps pipelines.
- Waterfall vs. Agile vs. DevSecOps.
Security activities should be integrated, automated, and continuous.