It has been suggested that “agile security engineering” can be achieved by
introducing agile software engineering values to the traditional practice of
mitigating security risks in software. This approach is suggested by Tappenden
et al. [361] who assert that by applying security elements to agile development