Paper Info
Title
How to Integrate Security Compliance Requirements with Agile Software Engineering at Scale?
Abstract
Integrating security into agile software development is an open issue for research and practice. Especially in strongly regulated industries, complexity increases not only when scaling agile practices but also when aiming for compliance with security standards. To achieve security compliance in a large-scale agile context, we developed S2C-SAFe: An extension of the Scaled Agile Framework that is compliant to the security standard IEC~62443-4-1 for secure product development. In this paper, we present the framework and its evaluation by agile and security experts within Siemens' large-scale project ecosystem. We discuss benefits and limitations as well as challenges from a practitioners' perspective. Our results indicate that \ssafe contributes to successfully integrating security compliance with lean and agile development in regulated environments. We also hope to raise awareness for the importance and challenges of integrating security in the scope of Continuous Software Engineering.
Year
DOI
Venue
2020
10.1007/978-3-030-64148-1_5
PROFES
DocType
ISSN
Citations 
Conference
Product-Focused Software Process Improvement - 21st International Conference, PROFES 2020
0
PageRank 
References 
Authors
0.34
0
4
Name
Order
Citations
PageRank
Fabiola Moyon121.07
Daniel Mendez225.48
Kristian Beckers316431.93
Sebastian Klepper4102.10