An information security manager reviews the results of the annual security awareness program and finds that while overall completion rates are high, the software development teams continue to introduce insecure coding flaws at a rate far above other departments. The generic awareness content covers phishing, password hygiene, and acceptable use. What should the security manager do FIRST to address this gap?