infrastructure lifecycle security