Application security testing follows a lifecycle similar to any other IT process. The security lifecycle includes identifying, assessing, protecting, and monitoring.