The rapidly evolving software security landscape is quickly becoming a critical concern for all industries. Cyberattacks are on the rise and software systems that were not considered a security risk in the past now need to incorporate software security measures to ensure consumer safety, privacy, and reliability. For the commercial trucking industry, software security is a big concern because the software systems connect to internal and external environments which creates a high level of cyber-threat exposure. In the commercial trucking industry, the risk of unsecure software code can lead to consequences that not only affect the organization but also the supply chain in whole. This study addressed a gap in the literature by answering the following research question: How do commercial trucking firms incorporate cybersecurity measures into their software development process? A qualitative exploratory case study methodology was selected, and semi-structured interviews were conducted with information technology professionals who work on software development teams that incorporate secure coding practices throughout the software development process. The population for this study consisted of information technology professionals working at a commercial trucking organization in the Southeastern region of the United States. Inductive analysis was used to identify emerging themes within the data. Themes that emerged highlighted the (a) secure code training should be provided to all software development team members, (b) software development teams need access to secure development tools to quickly identify and remediate source code flaws, and (c) integrating secure coding measures throughout the software development lifecycle is everyone’s responsibility.
|Commitee:||Dominguez, Alfredo, Tran, Vu|
|Department:||School of Business and Technology|
|School Location:||United States -- Minnesota|
|Source:||DAI-B 81/10(E), Dissertation Abstracts International|
|Keywords:||DevSecOPs, Secure lifecycle development, Secure source code development, Trucking cybersecurity|
Copyright in each Dissertation and Thesis is retained by the author. All Rights Reserved
The supplemental file or files you are about to download were provided to ProQuest by the author as part of a
dissertation or thesis. The supplemental files are provided "AS IS" without warranty. ProQuest is not responsible for the
content, format or impact on the supplemental file(s) on our system. in some cases, the file type may be unknown or
may be a .exe file. We recommend caution as you open such files.
Copyright of the original materials contained in the supplemental file is retained by the author and your access to the
supplemental files is subject to the ProQuest Terms and Conditions of use.
Depending on the size of the file(s) you are downloading, the system may take some time to download them. Please be