Towards Automated Continuous Security Compliance
<|reference_start|>Towards Automated Continuous Security Compliance: Context: Continuous Software Engineering is increasingly adopted in highly regulated domains, raising the need for continuous compliance. Adherence to especially security regulations -- a major concern in highly regulated domains -- renders Continuous Security Compliance of high relevance to industry and research.   Problem: One key barrier to adopting continuous software engineering in the industry is the resource-intensive and error-prone nature of traditional manual security compliance activities. Automation promises to be advantageous. However, continuous security compliance is under-researched, precluding an effective adoption.   Contribution: We have initiated a long-term research project with our industry partner to address these issues. In this manuscript, we make three contributions: (1) We provide a precise definition of the term continuous security compliance aligning with the state-of-art, (2) elaborate a preliminary overview of challenges in the field of automated continuous security compliance through a tertiary literature study, and (3) present a research roadmap to address those challenges via automated continuous security compliance.<|reference_end|>
@article{angermeir2024towards,
    title={Towards Automated Continuous Security Compliance},
    author={Florian Angermeir, Jannik Fischbach, Fabiola Moy'on, Daniel Mendez},
    journal={arXiv preprint arXiv:2407.21494},
    year={2024},
    archivePrefix={arXiv},
    eprint={2407.21494},
    primaryClass={cs.SE}
}