The traditional approach for security management fails in agile development projects. We summarize the cause of this failure and propose a new Agile Security Engagement Model (ASEM) to solve the issues. This model is risk-driven, supportive and robust. It embraces important innovations, such as a security services catalogue and continuous monitoring. This way of working helps organizations to properly address information security in agile environments.
Main points that have been covered are:
• Four false assumptions that make the traditional security approach fail
• ‘Feet in the mud’ with the Agile Security Engagement Model (ASEM)
• Explanation of the innovations in this Agile Security approach
Presenter:
Pascal de Koning is qualified as Information Security professional. He has the wide experience as a consultant and fills in the role of the security officer at various companies. Pascal is an active member of the Security Forum of The Open Group.