In an ideal Agile environment you are a small, quick organization full of smart people who are experts in their field. This is an uncommon ideal. The more common scenario is a large or well established business that sees agile as a way to become more relevant to their customers. These organizations come pre-packaged with processes and procedures around software development, security, and privacy. In short they already have an SDLC (software development life cycle).