{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T20:27:36Z","timestamp":1784320056070,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":27,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,15]],"date-time":"2024-04-15T00:00:00Z","timestamp":1713139200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Research Council of Norway (RCN) in the INTPART program","award":["project number #309911"],"award-info":[{"award-number":["project number #309911"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,15]]},"DOI":"10.1145\/3643662.3643954","type":"proceedings-article","created":{"date-parts":[[2024,8,26]],"date-time":"2024-08-26T18:16:08Z","timestamp":1724696168000},"page":"45-52","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["On DevSecOps and Risk Management in Critical Infrastructures: Practitioners' Insights on Needs and Goals"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8060-5672","authenticated-orcid":false,"given":"Xhesika","family":"Ramaj","sequence":"first","affiliation":[{"name":"\u00d8stfold University College, Halden, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5102-1122","authenticated-orcid":false,"given":"Mary","family":"S\u00e1nchez-Gord\u00f3n","sequence":"additional","affiliation":[{"name":"\u00d8stfold University College, Halden, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7304-3835","authenticated-orcid":false,"given":"Vasileios","family":"Gkioulos","sequence":"additional","affiliation":[{"name":"Norwegian University of Science and Technology, Gj\u00f8vik, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1555-9726","authenticated-orcid":false,"given":"Ricardo","family":"Colomo-Palacios","sequence":"additional","affiliation":[{"name":"Universidad Polit\u00e9cnica de Madrid, Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,8,26]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29032-9_3"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/11962977_4"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1468-5973.2007.00504.x"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2017.3571578"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3344948.3344977"},{"key":"e_1_3_2_1_6_1","unstructured":"Victoria Clarke. 2013. Successful Qualitative Research: A Practical Guide for Beginners. (2013) 1--400."},{"key":"e_1_3_2_1_7_1","volume-title":"Poth","author":"Creswell John W.","year":"2016","unstructured":"John W. Creswell and Cheryl N. Poth. 2016. Qualitative Inquiry and Research Design: Choosing Among Five Approaches. SAGE Publications."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2020.2966614"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45732-1_11"},{"key":"e_1_3_2_1_10_1","volume-title":"Theoretical Sensitivity: Advances in the Methodology of Grounded Theory","author":"Glaser Barney G.","year":"1978","unstructured":"Barney G. Glaser. 1978. Theoretical Sensitivity: Advances in the Methodology of Grounded Theory. Sociology Press."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/581271.581274"},{"key":"e_1_3_2_1_12_1","volume-title":"Hands-On Security in DevOps: Ensure continuous security, deployment, and delivery with DevSecOps","author":"Hsiang-Chih Hsu Tony","unstructured":"Tony Hsiang-Chih Hsu. 2018. Hands-On Security in DevOps: Ensure continuous security, deployment, and delivery with DevSecOps. Packt Publishing Ltd."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101967"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2003.1232286"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev.2018.00011"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-42307-9_4"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.6084\/m9.figshare.24718473"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-49094-6_44"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45126-6_9"},{"key":"e_1_3_2_1_20_1","volume-title":"The Phenomenology of the Social World","author":"Schutz Alfred","unstructured":"Alfred Schutz. 1967. The Phenomenology of the Social World. Northwestern University Press, Chicago. Retrieved from https:\/\/nupress.northwestern.edu\/9780810168022\/phenomenology-of-the-social-world\/"},{"key":"e_1_3_2_1_21_1","volume-title":"Interviewing as Qualitative Research: A Guide for Researchers in Education and the Social Sciences","author":"Seidman Irving","unstructured":"Irving Seidman. 2006. Interviewing as Qualitative Research: A Guide for Researchers in Education and the Social Sciences. Teachers College Press."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-7804-5_16"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2896941.2896946"},{"key":"e_1_3_2_1_24_1","unstructured":"Hasan Yasar. Overcoming DevSecOps Challenges: A Practical Guide for All Stakeholders."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-5850-7_7"},{"key":"e_1_3_2_1_26_1","volume-title":"Communication from the Commission to the Council and the European Parliament - Critical Infrastructure Protection in the fight against terrorism. Retrieved","year":"2023","unstructured":"2004. Communication from the Commission to the Council and the European Parliament - Critical Infrastructure Protection in the fight against terrorism. Retrieved October 6, 2023 from https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=celex%3A52004DC0702"},{"key":"e_1_3_2_1_27_1","volume-title":"Risk management --- Guidelines. Retrieved","author":"ISO","year":"2023","unstructured":"ISO 31000:2018(en), Risk management --- Guidelines. Retrieved October 7, 2023 from https:\/\/www.iso.org\/obp\/ui\/en\/#iso:std:iso:31000:ed-2:v1:en"}],"event":{"name":"EnCyCriS\/SVM '24: 2024 ACM\/IEEE 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) and 2024 IEEE\/ACM Second International Workshop on Software Vulnerability","location":"Lisbon Portugal","acronym":"EnCyCriS\/SVM '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"]},"container-title":["Proceedings of the 2024 ACM\/IEEE 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) and 2024 IEEE\/ACM Second International Workshop on Software Vulnerability"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643662.3643954","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3643662.3643954","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:05:32Z","timestamp":1750291532000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643662.3643954"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,15]]},"references-count":27,"alternative-id":["10.1145\/3643662.3643954","10.1145\/3643662"],"URL":"https:\/\/doi.org\/10.1145\/3643662.3643954","relation":{},"subject":[],"published":{"date-parts":[[2024,4,15]]},"assertion":[{"value":"2024-08-26","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}