Implementing and integrating security controls: A practitioners’ perspective

doi:10.1016/j.cose.2025.104516

Implementing and integrating security controls: A practitioners’ perspective

2025-05-10

0

OA

AI

DOI：10.1016/j.cose.2025.104516

Original

Original request for help

Save

Abstract

En 中文

Security controls are indispensable in today’s technology-driven world for their essential role in protecting applications and systems in many organizations. They help to manage the organizational controls to ensure confidentiality, integrity and access to vital infrastructure and data (e.g., software applications, financial records, personal information, intellectual property, etc.) by ensuring that only authorized and trustworthy users have privileged access. Further, integrating security controls within the Software Development Lifecycle (SDLC) is imperative for detecting application deficiencies and preventing potential breaches that could result in financial losses and expose the systems to external and/or internal threats. They reduce the exploitation risk by identifying and patching vulnerabilities in applications and networks within the organization.

Keywords:

Survey

Software engineering

Security controls

Practitioners

Implementing and integrating security controls: A practitioners’ perspective

Abstract

Journal

Organization