Architecture & practice·Delivery, flow and technical debt
the security review happened while the design was still a document instead of the week before launch.
Shift left
Moving a check earlier in the process, where fixing what it finds is cheap. It applies to testing, security, accessibility, performance and compliance, and the economics are the same in each case: the cost of a change rises with how much has been built on top of it. It becomes a slogan rather than a practice when the earlier check is added without removing the later one or giving the team the ability to act on it.