1) Bugs getting into production. Bugs and compliance violations should never be allowed into production, but the sad truth is that you can never completely prevent it. What you can do is establish a rigorous testing regime. It can even start out as manual testing, but if you use the right tools, manual tests can be easily converted into automated test scripts. Test early and often, and establish regression tests before releasing to production. A good DevSecOps tool will ensure the proper tests and compliance checks are run at just the right time.