Security is a process, it should not be treated in response to problems.
Security experts can be integrated directly into Feature Teams if needed.
Security experts are available in the organization for audit purposes, awareness and sharing.