Beyond the Security Asessment: How SSDLC Works in Practice