Proposal of a DevSecOps SCRUM-based Methodology for Software Development with Quality
Abstract
Collaboration in software development teams often requires effective activity management. Agile methodologies enable managing changes; however, fostering a culture of cross-functional collaboration within the organization and shared responsibility for security in development facilitates comprehensive communication. This provides stakeholders with better decision-making tools. The aim of this paper is to outline a methodology proposal for managing software development projects based on DevSecOps and Scrum. Subsequently, the methodology is tested in two case studies, and the results are presented, highlighting improvements in delivery times and software development quality. Finally, it discusses how integrating agile methodologies like DevSecOps and Scrum in software development project management provides a robust framework to adapt to changes and enhance the quality of the final product.
Downloads
References
F. Flores-Cerna, V. M. Sanhueza-Salazar, H. M. Valdés-González, y L. Reyes-Bozo, "Metodologías ágiles: un análisis de los desafíos organizacionales para su implementación", Revista Científica, vol. 43, no. 1, pp. 38–49, 2022, doi: 10.14483/23448350.18332.
C. Bryar y B. Carr, "Have we taken agile too far?" Harvard Business Review, 2021. [Online]. Disponible: https://hbr.org/2021/04/have-we-taken-agile-too-far
K. M. Sánchez, "Proceso de gestión de incidentes y problemas para la mesa de ayuda y de servicios de record S.A, basado en ITIL (information technology infrastructure library)", Montería, Córdoba, Colombia: Universidad de Córdoba, 2021. [Online]. Disponible: https://repositorio.unicordoba.edu.co/entities/publication/0f600392-dc9a-4a29-b4eb-06e167e07e28
R. B. TI, "Los 3 desafíos de implantar una cultura DevOps", Revista Byte TI, 2019. [Online]. Disponible: https://revistabyte.es/actualidad-it/devops/implantar-una-cultura-devops/
J. S. Q. Monroy, J. V. M. Padua, e I. A. C. Jiménez, "Caracterización y comparación de metodologías ágiles y tradicionales de desarrollo de producto", Ciencia e Ingeniería Neogranadina, vol. 32, no. 2, pp. 9–26, 2022, doi: 10.18359/rcin.5168.
CLEARED, "Devsecops fundamentals guidebook: Devsecops tools & activities", DEPARTMENT OF DEFENSE. United States of America, 2021. [Online]. Disponible: https://dodcio.defense.gov/Portals/0/Documents/Library/DevSecOpsTools-ActivitiesGuidebook.pdf
G. J. A. Zambrano, M. I. D. C. Lazo, D. G. M. Chávez, y D. C. V. Silva, "Gestión de riesgos para el desarrollo de proyectos de sistemas críticos", Revista Innovación y Software, vol. 3, no. 2, pp. 132–139, 2022.
D. G. C. Carpio, J. F. G. Mendoza, y J. H. Dorado, "Revisión del proceso de mejora de software", Revista Innovación y Software, vol. 3, no. 2, pp. 91–98, 2022, doi: 10.48168/innosoft.s9.a70.
M. E. C. Arroyo, A. F. V. Cabrera, J. P. S. Fernández, L. E. B. Chavil, y J. L. C. Otero, "Sistema web para mejorar la gestión comercial y de talento humano utilizando la metodología Scrum", Revista Innovación y Software, vol. 5, no. 1, pp. 125–140, 2024, doi: 10.48168/innosoft.s15.a147.
G. D. L. C. Rodríguez, R. A. M. Fernández, y A. C. M. Fernández, "Seguridad de la información en el comercio electrónico basado en ISO 27001: Una revisión sistemática", Revista Innovación y Software, vol. 4, no. 1, pp. 219–236, 2023, doi: 10.48168/innosoft.s11.a79.
O. E. C. Uceda y J. M. A. Pérez, "Influencia de Scrum en los plazos de entrega y rendimiento en los proyectos de las asignaturas de desarrollo de software", Revista Iberoamericana de Tecnología en Educación y Educación en Tecnología, no. 29, pp. 36–42, 2021, doi: 10.24215/18509959.29.e4.
E. F. Moreno, "La gestión del cambio, la colaboración virtual y la agilidad estratégica organizacional de empresas mexicanas ante los impactos por el COVID-19", Nova Sci, 2021, doi: 10.21640/ns.v13ie.2762.
P. D. G. Álvarez, "El cambio y su impacto en las organizaciones", Academo, vol. 8, no. 2, pp. 213–220, 2021, doi: 10.30545/academo.2021.jul-dic.10.
M. Navarro, "Sogeti: 'todas las compañías quieren ser DevOps'", Revista Byte TI, 2021. [Online]. Disponible: https://revistabyte.es/entrevistas/sogeti-devops-testing/
G. A. García-Mireles, N. P. Olivero, y H. Avila-George, "DevOps y la medición de la calidad del producto de software: Hallazgos preliminares", RISTI, no. 53, pp. 37–52, 2024, doi: 10.17013/risti.53.37-52.
- Conceptualization
- Data curation
- Formal Analysis
- Funding acquisition
- Investigation
- Methodology
- Project administration
- Resources
- Supervision
- Visualization
- Writing - review & editing
- Conceptualization
- Data curation
- Formal Analysis
- Funding acquisition
- Investigation
- Methodology
- Project administration
- Resources
- Supervision
- Visualization
- Writing - review & editing
- Conceptualization
- Data curation
- Formal Analysis
- Funding acquisition
- Investigation
- Methodology
- Project administration
- Resources
- Supervision
- Visualization
- Writing - review & editing
- Conceptualization
- Data curation
- Formal Analysis
- Funding acquisition
- Investigation
- Methodology
- Project administration
- Resources
- Supervision
- Visualization
- Writing - review & editing
Copyright (c) 2024 Innovation and Software
This work is licensed under a Creative Commons Attribution 4.0 International License.
The authors exclusively grant the right to publish their article to the Innovation and Software Journal, which may formally edit or modify the approved text to comply with their own editorial standards and with universal grammatical standards, prior to publication; Likewise, our journal may translate the approved manuscripts into as many languages as it deems necessary and disseminates them in several countries, always giving public recognition to the author or authors of the research.
