It is important for a company to gain an understanding of its current software development practices before embarking on a DevSecOps journey.