The DevSecOps and Agency Theory

An effective implementation of DevSecOps requires an increased focus on collaborations between different work groups or disciplines within IT (development, security, and operations/implementation). Nonetheless, different groups are still too often reluctant to trust each other, or inter-group confli...

Full description

Saved in:
Bibliographic Details
Published in2018 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) pp. 243 - 244
Main Author Lee, Jong Seok
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.10.2018
Subjects
agency theory
Collaboration
DevSecOps
Economics
goal incongruency
information asymmetry
Organizations
Security
Software
Software reliability
the principal-agent problem
Online AccessGet full text
DOI10.1109/ISSREW.2018.00013

Cover

More Information
Summary:An effective implementation of DevSecOps requires an increased focus on collaborations between different work groups or disciplines within IT (development, security, and operations/implementation). Nonetheless, different groups are still too often reluctant to trust each other, or inter-group conflicts tend to commonly occur. Against this backdrop, in this research I develop a framework based on Agency Theory that sheds light on the role of goal incongruency and information asymmetry in the DevSecOps context.
DOI:10.1109/ISSREW.2018.00013