Industry Talk: A Practical Guide to the Secure Development Life Cycle