Welcome to the InfoSci Platform
Reference Hub5
Case Study of Agile Security Engineering: Building Identity Management for a Government Agency

Case Study of Agile Security Engineering: Building Identity Management for a Government Agency

Kalle Rindell, Sami Hyrynsalmi, Ville Leppänen
Copyright: © 2017 |Volume: 8 |Issue: 1 |Pages: 15
ISSN: 1947-3036|EISSN: 1947-3044|EISBN13: 9781522513858|DOI: 10.4018/IJSSE.2017010103
Cite Article Cite Article

MLA

Rindell, Kalle, et al. "Case Study of Agile Security Engineering: Building Identity Management for a Government Agency." IJSSE vol.8, no.1 2017: pp.43-57. http://doi.org/10.4018/IJSSE.2017010103

APA

Rindell, K., Hyrynsalmi, S., & Leppänen, V. (2017). Case Study of Agile Security Engineering: Building Identity Management for a Government Agency. International Journal of Secure Software Engineering (IJSSE), 8(1), 43-57. http://doi.org/10.4018/IJSSE.2017010103

Chicago

Rindell, Kalle, Sami Hyrynsalmi, and Ville Leppänen. "Case Study of Agile Security Engineering: Building Identity Management for a Government Agency," International Journal of Secure Software Engineering (IJSSE) 8, no.1: 43-57. http://doi.org/10.4018/IJSSE.2017010103

Export Reference

Mendeley
Favorite Full-Issue Download

Abstract

Security concerns are increasingly guiding both the design and processes of software-intensive product development. In certain environments, the development of the product requires special security arrangements for development processes, product release, maintenance and hosting, and specific security-oriented processes and governance. Integrating the security engineering processes into agile development methods can have the effect of mitigating the agile methods' intended benefits. This article describes a case of a large ICT service provider building a secure identity management system for a sizable government agency. The project was a subject to strict security regulations due to the end product's critical role. The project was a multi-team, multi-site, standard-regulated security engineering and development work executed following the Scrum framework. The study reports the difficulties in combining security engineering with agile development, provides propositions to enhance Scrum for security engineering activities. Also, an evaluation of the effects of the security work on project cost presented.

Request Access

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.