A Security Evaluation Framework for U.K. E-Government Services Agile Software Development

Abstract

Government. One of the major issues is that we develop in Agile but the accreditation process is conducted using Waterfall resulting in delays to go live dates. Taking a brief look into the accreditation process that is used within Government for I.T. systems and applications, we focus on giving the accreditor the assurance they need when developing new applications and systems. A framework has been produced by utilising the Open Web Application Security Project's (OWASP) Application Security Verification Standard (ASVS).This framework will allow security and Agile to work side by side and produce secure code.

Framework for Securing Educational E-Government Service

“…Steve Harrison [6] tried to develop a framework by utilising the Open Web Application Security Project's (OWASP) Application Security Verification Standard (ASVS). The author in his work focused on developing his own security framework that can be used within Agile sprints to develop secure applications and to give assurance to the business owner that any technical risks have been mitigated.…”