humans executing tests that should be automated is a waste of human potential.” iii. Aggressively resolve unreliable tests and false positives iv. Focus on automating tests that genuinely validate business allowed to enter the system until the problem is fixed. 2. Bring in whatever help is needed to resolve the problem iii. Prioritize organizational/team goals over individual goals 1. The value stream

ensure visibility and enable prioritization ii. Conduct post-mortems for security incidents to resolve, prevent, and transfer security knowledge to the teams E. INTEGRATE PREVENTIVE SECURITY CONTROLS