{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T21:45:56Z","timestamp":1757540756648,"version":"3.28.0"},"reference-count":41,"publisher":"IEEE","license":[{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,6]]},"DOI":"10.1109\/cybersecpods.2019.8885100","type":"proceedings-article","created":{"date-parts":[[2019,10,31]],"date-time":"2019-10-31T20:28:15Z","timestamp":1572553695000},"page":"1-8","source":"Crossref","is-referenced-by-count":16,"title":["Security Risk Assessment and Management as Technical Debt"],"prefix":"10.1109","author":[{"given":"Kalle","family":"Rindell","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Johannes","family":"Holvitie","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"Android Security Ecosystem Investments Pay Dividends for Pixel","year":"2018","key":"ref39"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.21236\/ADA610905"},{"journal-title":"The Security Development Lifecycle","year":"2006","author":"howard","key":"ref33"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2008.48"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2016.92"},{"journal-title":"The DevOps Handbook How to Create World-Class Agility Reliability and Security in Technology Organizations","year":"2016","author":"kim","key":"ref30"},{"key":"ref37","doi-asserted-by":"crossref","first-page":"138","DOI":"10.1145\/3194164.3194167","article-title":"A Position Study to Investigate Technical Debt Associated with Security Weaknesses","author":"izurieta","year":"2018","journal-title":"Proceedings of the 2018 International Conference on Technical Debt - TechDebt '18"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-57633-6_13"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ASWEC.2018.00023"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-013-0195-2"},{"journal-title":"Information technology - Security techniques - Information security risk management ISO\/IEC","year":"2018","key":"ref10"},{"key":"ref40","first-page":"77","article-title":"Portfolio selection*","volume":"7","author":"markowitz","year":"1952","journal-title":"The Journal of Finance"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.03.009"},{"journal-title":"The building security in maturity model 9","year":"2018","key":"ref12"},{"journal-title":"Agile development using microsoft security development lifecycle","year":"2017","key":"ref13"},{"journal-title":"ISO\/IEC standard 21827 2008","year":"2008","key":"ref14"},{"journal-title":"Software Assurance Maturity Model","year":"2017","key":"ref15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2014.12.027"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MTD.2012.6225999"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2017.11.015"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1985362.1985370"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.4018\/IJSSSP.2018010103"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.2307\/2296886"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2004.1281254"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/157709.157715"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2006.43"},{"key":"ref29","first-page":"34","article-title":"Managing security work in scrum: Tensions and challenges","author":"t\u00fcrpe","year":"2017","journal-title":"Proceedings of the International Workshop on Secure Software Engineering in DevOps and Agile Development (SecSE 2017) CEUR Workshop Proceedings"},{"journal-title":"European Commission 2018 reform of EU data protection rules","year":"2018","key":"ref5"},{"journal-title":"ISO\/IEC Standard 27034-1 2011","year":"2011","key":"ref8"},{"journal-title":"Software Engineering","year":"2015","author":"sommerville","key":"ref7"},{"journal-title":"Agile Software Development with Scrum","year":"2002","author":"schwaber","key":"ref2"},{"journal-title":"ISO\/IEC standard 15408-1 2009","year":"2014","key":"ref9"},{"journal-title":"Extreme Programming Explained Embrace Change","year":"2000","author":"beck","key":"ref1"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2012.167"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/MTD.2012.6226000"},{"journal-title":"Technical Debt Quadrant","year":"2009","author":"fowler","key":"ref21"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CSEET.2006.30"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2639490.2639503"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2016.103"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2016.10.005"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2006.04.002"}],"event":{"name":"2019 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)","start":{"date-parts":[[2019,6,3]]},"location":"Oxford, United Kingdom","end":{"date-parts":[[2019,6,4]]}},"container-title":["2019 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8871248\/8884876\/08885100.pdf?arnumber=8885100","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,18]],"date-time":"2022-07-18T10:50:10Z","timestamp":1658141410000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8885100\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,6]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/cybersecpods.2019.8885100","relation":{},"subject":[],"published":{"date-parts":[[2019,6]]}}}