Best Practices for DevSecOps and ATO