Pergunta de entrevista da empresa Cognizant

Given a website, using SAST, DAST and Secure Code Review, how would you implement a security process to find/fix security issues