https://www.softwaresecured.com/improving-communication-between-your-security-and-dev-teams-so-everybody-wins/