The Open UniversitySkip to content

Towards agile security risk management in RE and beyond

Franqueira, Virginia N. L.; Bakalova, Zornitza; Tun, Thein Than and Daneva, Maya (2011). Towards agile security risk management in RE and beyond. In: Workshop on Empirical Requirements Engineering (EmpiRE 2011), pp. 33–36.

DOI (Digital Object Identifier) Link:
Google Scholar: Look up in Google Scholar


Little attention has been given so far to the process of security risk management at the early stages of system development. Security has been addressed by isolated security assurance practices, some of which consider risks and mitigations but they do not provide an overview of the overall security state of the system being developed. This paper takes the position that (1) these isolated security assurance practices should be fully integrated and should be embedded in short iterations of risk assessment, treatment and acceptance, providing input for updating security requirements and for security risk management, and that (2) available empirical data from public catalogs and databases should be used as a source of expertise, to leverage past experiences, and therefore reduce, although not eliminate, subjectivity of human judgment. Borrowing from the agile software development and project management philosophy, we introduce the idea of a light weight, agile approach to security risk management integrated to the development life cycle.

Item Type: Conference or Workshop Item
Copyright Holders: IEEE 2011
Project Funding Details:
Funded Project NameProject IDFunding Body
Not SetNot SetSecureChange
Extra Information: ISBN: 978-1-4577-10785-9
Keywords: agile software development; information security risk management; secure engineering; security assurance
Academic Unit/School: Faculty of Science, Technology, Engineering and Mathematics (STEM) > Computing and Communications
Faculty of Science, Technology, Engineering and Mathematics (STEM)
Research Group: Centre for Research in Computing (CRC)
Item ID: 29982
Depositing User: Thein Tun
Date Deposited: 09 Nov 2011 10:02
Last Modified: 07 Dec 2018 09:56
Share this page:


Altmetrics from Altmetric

Citations from Dimensions

Actions (login may be required)

Policies | Disclaimer

© The Open University   contact the OU