How do you ensure code security and compliance when developing software for highly regulated environments?