{"id":"https://openalex.org/W4224142968","doi":"https://doi.org/10.3390/jcp2020015","title":"Towards Agile Cybersecurity Risk Management for Autonomous Software Engineering Teams","display_name":"Towards Agile Cybersecurity Risk Management for Autonomous Software Engineering Teams","publication_year":2022,"publication_date":"2022-04-13","ids":{"openalex":"https://openalex.org/W4224142968","doi":"https://doi.org/10.3390/jcp2020015"},"language":"en","primary_location":{"id":"doi:10.3390/jcp2020015","doi":"https://doi.org/10.3390/jcp2020015","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp2020015","pdf_url":"https://www.mdpi.com/2624-800X/2/2/15/pdf?version=1649836886","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","norway-1"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/2/2/15/pdf?version=1649836886","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036183113","display_name":"Hannes Salin","orcid":"https://orcid.org/0000-0001-6327-3565","observed_orcids":["https://orcid.org/0000-0001-6327-3565"]},"institutions":[{"id":"https://openalex.org/I146360087","display_name":"Swedish Transport Administration","ror":"https://ror.org/000nes056","country_code":"SE","type":"government","lineage":["https://openalex.org/I146360087"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Hannes Salin","raw_affiliation_strings":["Department of Information and Communication Technology, Swedish Transport Administration, 78189 Borl\u00e4nge, Sweden"],"raw_orcid":"https://orcid.org/0000-0001-6327-3565","affiliations":[{"raw_affiliation_string":"Department of Information and Communication Technology, Swedish Transport Administration, 78189 Borl\u00e4nge, Sweden","institution_ids":["https://openalex.org/I146360087"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024279614","display_name":"Martin Lundgren","orcid":"https://orcid.org/0000-0003-1692-5721","observed_orcids":["https://orcid.org/0000-0003-1692-5721"]},"institutions":[{"id":"https://openalex.org/I190632392","display_name":"Lule\u00e5 University of Technology","ror":"https://ror.org/016st3p78","country_code":"SE","type":"education","lineage":["https://openalex.org/I190632392"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Martin Lundgren","raw_affiliation_strings":["Information Systems, Lule\u00e5 University of Technology, 97105 Lule\u00e5, Sweden"],"raw_orcid":"https://orcid.org/0000-0003-1692-5721","affiliations":[{"raw_affiliation_string":"Information Systems, Lule\u00e5 University of Technology, 97105 Lule\u00e5, Sweden","institution_ids":["https://openalex.org/I190632392"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5036183113"],"corresponding_institution_ids":["https://openalex.org/I146360087"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1047},"apc_paid":{"value":799,"currency":"EUR","value_usd":861},"fwci":2.9294,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.91717371,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":"2","issue":"2","first_page":"276","last_page":"291"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9682999849319458,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9682999849319458,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.022099999710917473,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.007300000172108412,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cybersecurity-risk-management","display_name":"cyber risk management","score":0.9639999866485596},{"id":"https://openalex.org/keywords/agile-software-development","display_name":"agile software development","score":0.8489999771118164},{"id":"https://openalex.org/keywords/secure-software-development","display_name":"secure software development","score":0.871999979019165},{"id":"https://openalex.org/keywords/risk-management-framework","display_name":"risk management framework","score":0.781000018119812},{"id":"https://openalex.org/keywords/risk-reduction","display_name":"risk mitigation","score":1.0},{"id":"https://openalex.org/keywords/knowledge-transfer","display_name":"knowledge transfer","score":0.996999979019165},{"id":"https://openalex.org/keywords/risk-escalation","display_name":"risk escalation","score":0.9480000138282776},{"id":"https://openalex.org/keywords/developer-attitudes","display_name":"developer attitudes","score":0.9440000057220459},{"id":"https://openalex.org/keywords/software-development-teams","display_name":"software development teams","score":0.6029999852180481}],"concepts":[{"id":"https://openalex.org/C14185376","wikidata":"https://www.wikidata.org/wiki/Q30232","display_name":"Agile software development","level":2,"score":0.8216387033462524},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.575025737285614},{"id":"https://openalex.org/C36837802","wikidata":"https://www.wikidata.org/wiki/Q17011481","display_name":"Agile usability engineering","level":5,"score":0.552696704864502},{"id":"https://openalex.org/C87813535","wikidata":"https://www.wikidata.org/wiki/Q956418","display_name":"Agile Unified Process","level":5,"score":0.5061408877372742},{"id":"https://openalex.org/C201305675","wikidata":"https://www.wikidata.org/wiki/Q852998","display_name":"Stakeholder","level":2,"score":0.503825843334198},{"id":"https://openalex.org/C199561411","wikidata":"https://www.wikidata.org/wiki/Q2665555","display_name":"Lean software development","level":5,"score":0.4830351769924164},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.46346795558929443},{"id":"https://openalex.org/C105776082","wikidata":"https://www.wikidata.org/wiki/Q617473","display_name":"Likert scale","level":2,"score":0.4375693202018738},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4274336099624634},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4220712184906006},{"id":"https://openalex.org/C110354214","wikidata":"https://www.wikidata.org/wiki/Q6314146","display_name":"Engineering management","level":1,"score":0.35396015644073486},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3522303104400635},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.35069647431373596},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3260144591331482},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.311991810798645},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.2995082139968872},{"id":"https://openalex.org/C180152950","wikidata":"https://www.wikidata.org/wiki/Q2904257","display_name":"Software development process","level":4,"score":0.2521025836467743},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2267608940601349},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2177245020866394},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.08131703734397888},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3390/jcp2020015","doi":"https://doi.org/10.3390/jcp2020015","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp2020015","pdf_url":"https://www.mdpi.com/2624-800X/2/2/15/pdf?version=1649836886","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","norway-1"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:DiVA.org:his-22958","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:his:diva-22958","pdf_url":null,"source":{"id":"https://openalex.org/S4306401028","display_name":"University Library of Sk\u00f6vde (University of Sk\u00f6vde)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205158640","host_organization_name":"University of Sk\u00f6vde","host_organization_lineage":["https://openalex.org/I205158640"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:DiVA.org:ltu-90199","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:ltu:diva-90199","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I86987016","host_organization_name":"KTH Royal Institute of Technology","host_organization_lineage":["https://openalex.org/I86987016"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:1832bcf1ec1d4fc68788813f194468a2","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/1832bcf1ec1d4fc68788813f194468a2","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 2, Iss 2, Pp 276-291 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp2020015","doi":"https://doi.org/10.3390/jcp2020015","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp2020015","pdf_url":"https://www.mdpi.com/2624-800X/2/2/15/pdf?version=1649836886","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","norway-1"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"score":0.7400000095367432,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4224142968.pdf","grobid_xml":"https://content.openalex.org/works/W4224142968.grobid-xml"},"referenced_works_count":62,"referenced_works":["https://openalex.org/W1421149053","https://openalex.org/W1539987097","https://openalex.org/W1586436801","https://openalex.org/W1589929340","https://openalex.org/W1897168949","https://openalex.org/W1990292954","https://openalex.org/W2002356434","https://openalex.org/W2038997366","https://openalex.org/W2059507980","https://openalex.org/W2109183213","https://openalex.org/W2111628838","https://openalex.org/W2112887123","https://openalex.org/W2124723632","https://openalex.org/W2124975206","https://openalex.org/W2158221468","https://openalex.org/W2165848285","https://openalex.org/W2210218563","https://openalex.org/W2401539323","https://openalex.org/W2417374371","https://openalex.org/W2482680863","https://openalex.org/W2491809426","https://openalex.org/W2568879219","https://openalex.org/W2585818648","https://openalex.org/W2599941311","https://openalex.org/W2610850639","https://openalex.org/W2744705243","https://openalex.org/W2758037626","https://openalex.org/W2772274819","https://openalex.org/W2782794636","https://openalex.org/W2787816013","https://openalex.org/W2792347597","https://openalex.org/W2799442568","https://openalex.org/W2887144605","https://openalex.org/W2904915737","https://openalex.org/W2906376056","https://openalex.org/W2909308912","https://openalex.org/W2943352284","https://openalex.org/W2945660265","https://openalex.org/W2953018205","https://openalex.org/W2964377266","https://openalex.org/W2972729239","https://openalex.org/W2976198599","https://openalex.org/W3003654666","https://openalex.org/W3112961120","https://openalex.org/W3158989633","https://openalex.org/W3164980773","https://openalex.org/W3216255103","https://openalex.org/W4213003081","https://openalex.org/W4242270361","https://openalex.org/W4253072831","https://openalex.org/W4285620221","https://openalex.org/W4301702048","https://openalex.org/W6631767708","https://openalex.org/W6634915145","https://openalex.org/W6676235441","https://openalex.org/W6677031349","https://openalex.org/W6683758456","https://openalex.org/W6716866546","https://openalex.org/W6744925985","https://openalex.org/W6745848938","https://openalex.org/W6754369729","https://openalex.org/W6787469883"],"related_works":["https://openalex.org/W2607592281","https://openalex.org/W2159825400","https://openalex.org/W2518983719","https://openalex.org/W2113109691","https://openalex.org/W1497203923","https://openalex.org/W1965077647","https://openalex.org/W2218678539","https://openalex.org/W2356096461","https://openalex.org/W1512044435","https://openalex.org/W2534333789"],"abstract_inverted_index":{"In":[0],"this":[1],"study,":[2],"a":[3,9,106,115,133],"framework":[4,128],"was":[5,108],"developed,":[6],"based":[7,57],"on":[8,58,158],"literature":[10,24,66],"review,":[11],"to":[12,97,110,119,136],"help":[13,137],"managers":[14,138],"incorporate":[15],"cybersecurity":[16,50,148],"risk":[17,51,74,77,80,149],"management":[18],"in":[19,37,43,103,145],"agile":[20,44,49,143,154],"development":[21],"projects.":[22],"The":[23,126],"review":[25],"used":[26],"predefined":[27],"codes":[28],"that":[29],"were":[30,55],"developed":[31],"by":[32],"extending":[33],"previously":[34],"defined":[35],"challenges":[36],"the":[38,59,64,71,90,93,104,121],"literature\u2014for":[39],"developing":[40],"secure":[41],"software":[42,112],"projects\u2014to":[45],"include":[46],"aspects":[47],"of":[48,70,92,147],"management.":[52],"Five":[53],"steps":[54],"identified":[56,94],"insights":[60,157],"gained":[61],"from":[62],"how":[63],"reviewed":[65],"has":[67],"addressed":[68],"each":[69,124],"challenges:":[72],"(1)":[73],"collection;":[75],"(2)":[76],"refinement;":[78],"(3)":[79],"mitigation;":[81],"(4)":[82],"knowledge":[83],"transfer;":[84],"and":[85,96,139,161],"(5)":[86],"escalation.":[87],"To":[88],"assess":[89],"appropriateness":[91],"steps,":[95],"determine":[98],"their":[99,142],"inclusion":[100],"or":[101],"exclusion":[102],"framework,":[105],"survey":[107],"submitted":[109],"145":[111],"developers":[113,140],"using":[114],"four-point":[116],"Likert":[117],"scale":[118],"measure":[120],"attitudes":[122],"towards":[123],"step.":[125],"resulting":[127],"presented":[129],"herein":[130],"serves":[131],"as":[132],"starting":[134],"point":[135],"structure":[141],"projects":[144],"terms":[146],"management,":[150],"supporting":[151],"less":[152],"overloaded":[153],"processes,":[155],"stakeholder":[156],"relevant":[159],"risks,":[160],"increased":[162],"security":[163],"assurance.":[164]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":2}],"updated_date":"2026-10-07T09:51:55.459714","created_date":"2022-04-20T00:00:00"}