Abstract Embed security checks into every aspect of software development and production Introduce security as part of the responsibility