English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Many industrial software development processes today have to comply withsecurity standards such as the IEC~62443-4-1. These standards, written innatural language, are ambiguous and complex to understand. This is especiallytrue for non-security experts. Security practitioners thus invest much effortinto comprehending standards and, later, into introducing them to developmentteams. However, our experience in the industry shows that developmentpractitioners might very well also read such standards, but nevertheless end upinviting experts for interpretation (or confirmation). Such a scenario is notin tune with current trends and needs of increasing velocity in continuoussoftware engineering.  In this paper, we propose a tool-supported approach to make securitystandards more precise and easier to understand for both non-security as wellas security experts by applying process models. This approach emerges from alarge industrial company and encompasses so far the IEC62443-4-1 standard. Wefurther present a case study with 16 industry practitioners showing how theapproach improves communication between development and security compliancepractitioners.

Using Process Models to understand Security Standards