Care and Feeding of Your Security Champion

Jaatun, Martin Gilje; Cruzes, Daniela Soares
Chapter, Peer reviewed
Accepted version
Thumbnail
View/Open
URI
https://hdl.handle.net/11250/3048652
Date
2021
Metadata
Show full item record
Collections
Original version
2021 international conference on cyber situational awareness, data analytics and assessment :CyberSA 2021 : Trustworthy and transparent AI  
Abstract
In agile software development, adoption of security practices poses challenges, often because security activities are not prioritized, or because the practitioners are not able to see the relevance and importance of the activities to the improvement of the security in the project. In many teams, security activities can be seen as an innovation and as such, there is a need for a champion to realize these innovations in the teams. Security champions make software security possible. Even though all developers need to know a minimum of software security, every team needs someone to lean on when the ride gets rough – and that person is the security champion. In this paper we present the results of a case study with security champions and possible steps for establishing and maintaining this role in agile teams.
Publisher
Institute of Electrical and Electronics Engineers
Copyright
© 2022 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.