"Shift Left" is a popular catchphrase when it comes to developing your own software development cycle in the direction of security. However, many technicians find it difficult to deal with such process-oriented questions and shy away from the effort.
OWASP SAMM is a framework with the aim of making your own SDLC measurable and is an exciting and surprisingly interesting introduction to a process-oriented way of thinking, especially for Devs & Ops (and everyone in between) who are used to working hands-on.