Taking agile development beyond software – what are the security risks?

• Published in: Network security Vol. 2015; no. 12; pp. 8 - 11
• Main Author: Caldwell, Tracey
• Format: Journal Article
• Language: English
• Published: Kidlington Elsevier Ltd 01.12.2015; Elsevier BV
• Subjects: Network security; Risk; Software; Software engineering
• ISSN: 1353-4858; 1872-9371
• DOI: 10.1016/S1353-4858(15)30110-0

The risks associated with developing software following agile methods have been a subject for discussion for some time and continue to evolve. And agile development methods are no longer just confined to software development. Tracey Caldwell highlights the risks arising from the agile approach – characterised by incremental, iterative work cadences – and addresses concerns that the customer or product owner focus of agile methods may compromise network security, as these major stakeholders are not generally prioritising security. The security risks associated with developing software following agile methods have been a subject for discussion for some time and continue to evolve. In addition, agile development methods are no longer just confined to software development and may be used to develop any number of web or IT-dependent products and services too that are interdependent with the network security of an enterprise.