11 - Security should be integrated into every stage of the software development lifecycle
Purpose:
Security baked in early.
Best Practices:
Define security requirements early in the project, making them a part of the initial project plan and design.
12 - Secure coding practices and code reviews should be implemented
Purpose:
Code review can prevent bigger problems later.
Best Practices:
Document the code reviews.
Examples:
May use a ticketing system.