There's also security assessment ... software development lifecycle so "ship day" doesn't mean "ship vulnerabilities." ...