{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,23]],"date-time":"2025-12-23T15:39:00Z","timestamp":1766504340097,"version":"3.40.3"},"publisher-location":"Cham","reference-count":13,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031727801"},{"type":"electronic","value":"9783031727818"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,1,11]],"date-time":"2025-01-11T00:00:00Z","timestamp":1736553600000},"content-version":"vor","delay-in-days":10,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>This paper explores the emergence of agile-inspired approaches in the critical infrastructure sector, with a focus on the current digital transformation of the Norwegian Oil &amp; Gas industry. It addresses how traditional plan-driven development and strict architectural principles are challenged by the need to exploit the growing volume of operational data, in search for better, faster, and safer operations. We emphasize the increasing reliance on data for optimizing operations and the inherent risks and culture clashes between Information Technology (IT) and Operational Technology (OT). We furthermore discuss the role of cybersecurity in this transition, illustrating how increased connectivity and agile-like approaches can both mitigate and exacerbate security vulnerabilities.<\/jats:p>","DOI":"10.1007\/978-3-031-72781-8_9","type":"book-chapter","created":{"date-parts":[[2025,1,10]],"date-time":"2025-01-10T18:05:52Z","timestamp":1736532352000},"page":"83-89","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Agile Approaches in\u00a0Critical Infrastructures"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2718-6637","authenticated-orcid":false,"given":"Geir Kjetil","family":"Hanssen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7127-6694","authenticated-orcid":false,"given":"Martin Gilje","family":"Jaatun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,1,11]]},"reference":[{"key":"9_CR1","unstructured":"Dragos: PIPEDREAM: CHERNOVITE\u2019s emerging malware targeting industrial control systems. Whitepaper. https:\/\/hub.dragos.com\/whitepaper\/chernovite-pipedream"},{"key":"9_CR2","doi-asserted-by":"crossref","unstructured":"Fitzgerald, B., Stol, K.J., O\u2019Sullivan, R., O\u2019Brien, D.: Scaling agile methods to regulated environments: an industry case study. In: 2013 35th International Conference on Software Engineering (ICSE), pp. 863\u2013872. IEEE (2013)","DOI":"10.1109\/ICSE.2013.6606635"},{"key":"9_CR3","unstructured":"Hanssen, G.K., Onshus, T., Jaatun, M.G., Myklebust, T., Ottermo, M., Lundteigen, M.A.: Principles of digitalisation and IT-OT integration. Technical report, SINTEF Digital (2021). https:\/\/www.havtil.no\/globalassets\/fagstoff\/prosjektrapporter\/ikt-sikkerhet\/sintef---report---principles-of-digitalisation-and-it-ot-integration.pdf"},{"key":"9_CR4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99334-8","volume-title":"SafeScrum\u00ae- Agile Development of Safety-Critical Software","author":"GK Hanssen","year":"2018","unstructured":"Hanssen, G.K., Myklebust, T., St\u00e5lhane, T.: SafeScrum\u00ae- Agile Development of Safety-Critical Software. Springer International Publishing, Cham (2018)"},{"key":"9_CR5","doi-asserted-by":"publisher","unstructured":"Hanssen, G.K., Thieme, C.A., Bjark\u00f8, A.V., Lundteigen, M.A., Bernsmed, K.E., Jaatun, M.G.: A continuous OT cybersecurity risk analysis and mitigation process. In: Proceedings of the The 33rd European Safety and Reliability Conference (ESREL 2023). Research Publishing Services (2023). https:\/\/doi.org\/10.3850\/978-981-18-8071-1_P413-cd, https:\/\/ntnuopen.ntnu.no\/ntnu-xmlui\/handle\/11250\/3103209","DOI":"10.3850\/978-981-18-8071-1_P413-cd"},{"key":"9_CR6","unstructured":"IEC: IEC 61508-1:2010 functional safety of lectrical\/electronic\/programmable electronic safety-related systems"},{"key":"9_CR7","unstructured":"IEC: IEC\/TS 62443-1-1:2009 Security for industrial automation and control systems - Part 1-1: Terminology, concepts and models (2009)"},{"key":"9_CR8","unstructured":"Line, M.B., Nordland, O., R\u00f8stad, L., T\u00f8ndel, I.A.: Safety vs security? In: PSAM Conference, New Orleans, USA (2006)"},{"key":"9_CR9","doi-asserted-by":"crossref","unstructured":"Lu, H., Guo, L., Azimi, M., Huang, K.: Oil and gas 4.0 era: a systematic review and outlook. Comput. Ind. 111, 68\u201390 (2019)","DOI":"10.1016\/j.compind.2019.06.007"},{"key":"9_CR10","doi-asserted-by":"publisher","unstructured":"\u00d8ien, K., Hauge, S., Jaatun, M.G., Fl\u00e5, L., Bodsberg, L.: A survey on cybersecurity barrier management in process control environments. In: 2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom), pp. 113\u2013120. IEEE (2022).https:\/\/doi.org\/10.1109\/CloudCom55334.2022.00026, https:\/\/ieeexplore.ieee.org\/document\/10005352\/","DOI":"10.1109\/CloudCom55334.2022.00026"},{"key":"9_CR11","unstructured":"Sanders, G., Morrow, T., Richmond, N., Woody, C.: Integrating zero trust and DevSecOps. Carnegie Mellon University Software Engineering Institute White Paper (2021). https:\/\/apps.dtic.mil\/sti\/trecms\/pdf\/AD1145432.pdf"},{"key":"9_CR12","unstructured":"Vedere Labs: OT:ICEFALL - the legacy of \u201cinsecure by design\u201d and its implications for certifications and risk management. Technical report, Vedere Labs (2022). https:\/\/www.forescout.com\/resources\/ot-icefall-report\/"},{"key":"9_CR13","doi-asserted-by":"publisher","unstructured":"Williams, T.J.: The Purdue enterprise reference architecture. Comput. Ind. 24(2), 141\u2013158 (1994). https:\/\/doi.org\/10.1016\/0166-3615(94)900175, https:\/\/www.sciencedirect.com\/science\/article\/pii\/0166361594900175","DOI":"10.1016\/0166-3615(94)900175"}],"container-title":["Lecture Notes in Business Information Processing","Agile Processes in Software Engineering and Extreme Programming \u2013 Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-72781-8_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,10]],"date-time":"2025-01-10T19:02:54Z","timestamp":1736535774000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-72781-8_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031727801","9783031727818"],"references-count":13,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-72781-8_9","relation":{},"ISSN":["1865-1348","1865-1356"],"issn-type":[{"type":"print","value":"1865-1348"},{"type":"electronic","value":"1865-1356"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"11 January 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"XP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Agile Software Development","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Bozen-Bolzano","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 June 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"7 June 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"xpu2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.agilealliance.org\/xp2024\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}