A Model-Driven Approach for the Design, Implementation, and Execution of Software Development Methods

Úbeda, Mario Cervera

doi:10.4995/thesis/10251/53931

Cited by 1 publication

(2 citation statements)

References 108 publications

(245 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…SME researchers have suggested different approaches to tailoring (Bajec et al , 2007; Harmsen, 1997; Cervera, 2015; Karlsson and Ågerfalk, 2009; Ralyté and Rolland, 2001; Ralyté and Franch, 2018; Sandkuhl and Seigerroth, 2019). Although there are differences between these approaches, “they share some fundamental ideas.…”

Section: Situational Methods Engineeringmentioning

confidence: 99%

“…Thus, given that SME researchers have suggested and investigated different ways of tailoring artifacts that share a similar purpose as ISPs, it seems reasonable to draw on this research as a starting point for a tailoring approach to ISPs. SME researchers have suggested different approaches to tailoring (Bajec et al, 2007;Harmsen, 1997;Cervera, 2015;Karlsson and Ågerfalk, 2009;Ralyt e and Rolland, 2001;Ralyt e and Franch, 2018;Sandkuhl and Seigerroth, 2019). Although there are differences between these approaches, "they share some fundamental ideas.…”

Section: Situational Methods Engineeringmentioning

confidence: 99%

See 1 more Smart Citation

Policy components – a conceptual model for modularizing and tailoring of information security policies

Rostami

Karlsson

Gao

2023

ICS

View full text Add to dashboard Cite

Purpose This paper aims to propose a conceptual model of policy components for software that supports modularizing and tailoring of information security policies (ISPs). Design/methodology/approach This study used a design science research approach, drawing on design knowledge from the field of situational method engineering. The conceptual model was developed as a unified modeling language class diagram using existing ISPs from public agencies in Sweden. Findings This study’s demonstration as proof of concept indicates that the conceptual model can be used to create free-standing modules that provide guidance about information security in relation to a specific work task and that these modules can be used across multiple tailored ISPs. Thus, the model can be considered as a step toward developing software to tailor ISPs. Research limitations/implications The proposed conceptual model bears several short- and long-term implications for research. In the short term, the model can act as a foundation for developing software to design tailored ISPs. In the long term, having software that enables tailorable ISPs will allow researchers to do new types of studies, such as evaluating the software's effectiveness in the ISP development process. Practical implications Practitioners can use the model to develop software that assist information security managers in designing tailored ISPs. Such a tool can offer the opportunity for information security managers to design more purposeful ISPs. Originality/value The proposed model offers a detailed and well-elaborated starting point for developing software that supports modularizing and tailoring of ISPs.

show abstract