https://securingdev.github.io/posts/security-maturity-geriatric-teams/
Security Maturity: Geriatric Teams - securing.dev