Secure software development practices are integrated, and their performance is monitored throughout the software development life cycle