2020 ◽  
Author(s):  
Nathan Newton ◽  
Craig Anslow ◽  
Andreas Drechsler

© 27th European Conference on Information Systems - Information Systems for a Sharing Society, ECIS 2019. All rights reserved. The importance of information security in software development projects is long recognised, with many comprehensive standards and procedures in use to provide assurance of information security. The agile development paradigm conflicts with traditional security assurance by emphasising the delivery of functional requirements and a reduction in structured and linear development styles. Through a series of thirteen qualitative interviews, this study identifies practices that address this problem which have been successfully adopted by agile practitioners. The findings present four categories of practices - organisational, team, project, and technical - and twelve critical success factors that should be explicitly considered by practitioners to assure agile security. The critical success factors provide a foundation for practitioners to strategically identify and develop best practices to embed information security in agile development projects. The identified categories also highlight the importance of agile security practices centring around individuals and culture and contributes to the literature by providing a representation of agile security practices that encompasses a broad range of focal areas.


10.29007/r64x ◽  
2019 ◽  
Author(s):  
Tapiwa Gundu ◽  
Mark Maronga ◽  
Duane Boucher

The rapid pace of technological developments of the fourth industrial revolution (Industry 4.0) increasingly leads to the need for cyber skills amongst the organizational workforce. However, some countries are lagging in the necessary skills required, so organizations need to access a diverse pool of employees for recruitment purposes. The establishment of culturally diverse workforces requires a more mindful approach to how they are managed in order to foster a cyber security culture in the workplace. Typically, culturally diverse workforces cause more cyber security breaches, threats, and incidents, because of inherent trust issues amongst culturally diverse employees. A literature review was conducted to identity relevant critical success factors to foster a cyber security culture for a culturally diverse workforce. The researchers identified n=668 articles from Google Scholar using three key phrases. These articles were then filtered for a ten-year range (2009-2019), which returned n=117. A review of the key phrases in these articles identified n=20 relevant articles. From these eight critical success factors were identified, which are discussed in brief and related to the Theory of Planned Behavior and Hofstede’s Cultural Dimensions Theory. Suggestions of action items for each critical success factor are provided.


2020 ◽  
Author(s):  
Nathan Newton ◽  
Craig Anslow ◽  
Andreas Drechsler

© 27th European Conference on Information Systems - Information Systems for a Sharing Society, ECIS 2019. All rights reserved. The importance of information security in software development projects is long recognised, with many comprehensive standards and procedures in use to provide assurance of information security. The agile development paradigm conflicts with traditional security assurance by emphasising the delivery of functional requirements and a reduction in structured and linear development styles. Through a series of thirteen qualitative interviews, this study identifies practices that address this problem which have been successfully adopted by agile practitioners. The findings present four categories of practices - organisational, team, project, and technical - and twelve critical success factors that should be explicitly considered by practitioners to assure agile security. The critical success factors provide a foundation for practitioners to strategically identify and develop best practices to embed information security in agile development projects. The identified categories also highlight the importance of agile security practices centring around individuals and culture and contributes to the literature by providing a representation of agile security practices that encompasses a broad range of focal areas.


2018 ◽  
Author(s):  
Franka Cadée ◽  
Marianne J. Nieuwenhuijze ◽  
Antoine L. M. Lagro-Janssen ◽  
Raymond de Vries

Author(s):  
I. D. Rudinskiy ◽  
D. Ya. Okolot

The article discusses aspects of the formation of information security culture of college students. The relevance of the work is due to the increasing threats to the information security of the individual and society due to the rapid increase in the number of information services used. Based on this, one of the important problems of the development of the information society is the formation of a culture of information security of the individual as part of the general culture in its socio-technical aspect and as part of the professional culture of the individual. The study revealed the structural components of the phenomenon of information security culture, identified the reasons for the interest in the target group of students. It justifies the need for future mid-level specialists to form an additional universal competency that ensures the individual’s ability and willingness to recognize the need for certain information, to identify and evaluate the reliability and reliability of data sources. As a result of the study, recommendations were formulated on the basis of which a culture of information security for college students can be formed and developed and a decomposition of this process into enlarged stages is proposed. The proposals on the list of disciplines are formulated, within the framework of the study of which a culture of information security can develop. The authors believe that the recommendations developed will help future mid-level specialists to master the universal competency, consisting in the ability and willingness to recognize the need for certain information, to identify and evaluate the reliability and reliability of data sources, as well as to correctly access the necessary information and its further legitimate use, which ultimately forms a culture of information security.


2010 ◽  
pp. 41-61
Author(s):  
V. Andreev

The article discusses the concept of "success" in relation to innovative business and its performance. The quantity of innovative projects that can consistently overcome the stages of the innovation process to achieve the desired result is defined. The author presents the results of empirical research of successful and unsuccessful projects of leading Russian innovative companies in various industries, identifies key factors of successful development of new industrial products.


Sign in / Sign up

Export Citation Format

Share Document