Agile Changes of Security Landscape: A Human Factors and Security Investment View

The information security experts are finding it challenging to timely response the emerging threats. The rapid changing of security landscape and dependency on the agile software and system development projects make it challenging to address these threats in a real time. This could create potential risks to the overall business continuity. Furthermore, critical human factors, cost and investment in the information security field will add more anxiety in dealing with risks in an agile environment. There is a need for a unified approach to address the principles of information security, human factors and security investment in an agile environment. This paper provides a solution for constructing an effective information security system by taking into consideration an adequate risk assessment and controls, considering critical human factors and security investment within agile changes of security landscape. A list of concepts is considered for the purpose of an effective information security system. The paper also includes a short review of existing knowledge on the topics of agile development and information security.