We have this article on our blog where we discuss DevSecOps best practices to be implemented. Check it out. It could be of great use to you!