Towards Agile Cybersecurity Risk Management for Autonomous Software Engineering Teams

In this study, a framework was developed, based on literature review, to help managers incorporate cybersecurity risk management in agile development projects. The review used predefined codes that were developed by extending previously defined challenges the literature—for developing secure software projects—to include aspects of management. Five steps identified insights gained from how reviewed has addressed each challenges: (1) collection; (2) refinement; (3) mitigation; (4) knowledge transfer; and (5) escalation. To assess appropriateness steps, determine their inclusion or exclusion framework, survey submitted 145 developers using four-point Likert scale measure attitudes towards step. resulting presented herein serves as starting point structure projects terms management, supporting less overloaded processes, stakeholder relevant risks, increased security assurance.