How to bootstrap your SDLC with verification activities

If you currently are not performing web application security verification as part of your SDLC, you can use the OWASP ASVS to add verification activities into your SDLC. Alternatively, if you currently are performing some form of verification activities within your SDLC, you can use ASVS to ensure the range in the coverage and level of rigor of those activities.

…

Good luck!