Capco interview question

What the best way to implement devsecops