The catalog
Security
OWASP Top 10 code scan with exploit scenarios
STRIDE analysis, attack trees, mitigation playbooks
On-call playbooks, sev-level decisions, blameless post-mortems