Domanda di colloquio di Cognizant

Given a website, using SAST, DAST and Secure Code Review, how would you implement a security process to find/fix security issues