I doubt this will have any impact on employee day to day. This will be management telling employees to deliver the same exact amount of work at the same speed as before with no extra time to address security. However, they will now be judged on the security components of their work retroactively when things break.