Training and Awareness
Because security is distributed throughout the entire development process, a good understanding of security is required throughout the entire development team. T&A is a topic that must be addressed by everyone (engineers, architects, business representatives, …) across the team and the organization.
Continuous training, awareness actions, communication channels and much more are just some of the actions that have to be done in this all over building block.