Gestión de riesgos en ingeniería de software : seguridad y calidad, ejes fundamentales en ciencias computacionales

Ricardo Manuel Candanedo Yau

doi:10.48204/j.scientia.v36n2.a9424

Submitted February 23, 2026

Published 2026-07-15

Artículos

Vol. 36 No. 2 (2026): Scientia

Risk management in software engineering : security and quality, fundamental pillars in computer science

Ricardo Manuel Candanedo Yau⁺⁻

DOI https://doi.org/10.48204/j.scientia.v36n2.a9424

PDF (Español (España))

References

DOI: 10.48204/j.scientia.v36n2.a9424

Published: 2026-07-15

How to Cite

Candanedo Yau, R. M. (2026). Risk management in software engineering : security and quality, fundamental pillars in computer science. Scientia, 36(2), 111–134. https://doi.org/10.48204/j.scientia.v36n2.a9424

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.

Abstract

The objective of this study was to analyze the integration of practices aimed at preventing incidents and ensuring reliable processes within the development of information systems, emphasizing their contribution to organizational performance. A quantitative, descriptive, and non-experimental design approach was adopted. The population consisted of technology professionals involved in application development projects in academic and business institutions.

Data collection instruments included a structured questionnaire and a checklist based on international standards, focused on evaluating technical procedures, operational controls, and compliance with established guidelines. Data analysis was conducted using descriptive statistics through frequencies and percentages.

The findings showed that the systematic application of formal methodologies reduced operational failures, strengthened the reliability of information products, and optimized internal process management. In addition, the adoption of international regulatory frameworks promoted standardization and continuous improvement in the evaluated projects.

The main contribution of this research was to demonstrate that the implementation of structured strategies oriented toward technical control and evaluation had a positive impact on system stability and organizational efficiency, becoming a key element for the sustainable development of technological solutions.

Downloads

Download data is not yet available.

References

Alghawli, A. S. A. & Radivilova, T. (2024). Resilient cloud cluster with DevSecOps security model, automates data analysis, vulnerability search and risk calculation. arXiv preprint. https://arxiv.org/abs/2412.16190
Alsaeedi, A. & Khan, R. A. (2022). A systematic review of software security risk management. IEEE Access, 10, 51402–51420. https://doi.org/10.1109/ACCESS.2022.3175628
Alshamrani, A., Myneni, S., Chowdhary, A. & Huang, D. (2021). A survey on secure software engineering: State-of-the-art and future directions. Computers & Security, 101, 102248. https://doi.org/10.1016/j.cose.2021.102248
Alwageed, H. S. & Khan, R. A. (2025). The role of generative AI in strengthening secure software coding practices: A systematic perspective. arXiv preprint. https://arxiv.org/abs/2504.19461
Andersson, S. (2025). Information security risk management tools in the air traffic management domain. Journal of Transportation Security, 18(1). https://doi.org/10.1007/s12198-024-00284-x
Babar, M. A. & Fernandez, E. B. (2020). Software security risk management: A systematic literature review. Computer Standards & Interfaces, 70, 103431. https://doi.org/10.1016/j.csi.2020.103431
Charoenwet, W., Thongtanunam, P., Pham, V.-T. & Treude, C. (2023). Toward effective secure code reviews: An empirical study of security-related coding weaknesses. arXiv preprint. https://arxiv.org/abs/2311.16396
Coston, I. (2025). Enhancing secure software development with AZTRM-D: Automated Zero Trust Risk Management with DevSecOps integration. Applied Sciences, 15(15), 8163. https://doi.org/10.3390/app15158163
Dissanayake, N., Jayatilaka, A., Zahedi, M. & Babar, M. A. (2020). Software security patch management: A systematic literature review of challenges, approaches, tools and practices. arXiv preprint. https://arxiv.org/abs/2012.00544
Felderer, M., Breu, R. & Katt, B. (2021). Security engineering for modern software systems. Springer. https://doi.org/10.1007/978-3-030-66707-7
França, B. B. N., Jeronimo, H., Travassos, G. H. & Ebert, C. (2021). DevSecOps: A multivocal literature review. Journal of Systems and Software, 180, 111011. https://doi.org/10.1016/j.jss.2021.111011
Jarih, A. A., Khalefa, M. S., Khalaf, Z. A., Mohamed, A. S. & Ibrahim, K. M. (2025). Review of risk management in software development process. En Software Engineering: Emerging Trends and Practices (pp. 358–376). Springer. https://doi.org/10.1007/978-3-031-70305-8_24
Karam, M., Baker, T., Taleb-Bendiab, A. & Al-Jumeily, D. (2021). A systematic literature review of software supply chain security. Computers & Security, 109, 102298. https://doi.org/10.1016/j.cose.2021.102298
Khan, M. U., Zafar, A. & Nazir, S. (2021). Risk management in software development life cycle: A systematic literature review. Journal of Software: Evolution and Process, 33(9), e2360. https://doi.org/10.1002/smr.2360
Laracy, J. R. (2025). Software quality assurance and AI: A systems-theoretic approach. Software, 4(1), 30–45. https://doi.org/10.3390/software4010003
Muthanna, Y. M. A. (2024). Adopting security practices in software development process. International Journal of Computing and Digital Systems, 15(1), 1151-1165. https://doi.org/10.12785/ijcds/150186
O'Donoghue, E., Hastings, Y., Ortiz, E. & Manzi Muneza, A. R. (2025). Software bill of materials in software supply chain security: A systematic literature review. arXiv preprint. https://arxiv.org/abs/2506.03507
Sandhu, J. & Lai, L. (2025). Research on security risk identification and evaluation in open source software. ACM Digital Library. https://doi.org/10.1145/3736426.3736467
Siddiqui, S. A., Thapa, C., Holland, R., Shao, W. & Camtepe, S. (2024). Elevating software trust: Unveiling and quantifying the risk landscape. arXiv preprint. https://arxiv.org/abs/2408.02876
Tasmin Jaigirdar, F., Jayatilaka, A. & Babar, M. A. (2026). Software vulnerability management in IoT systems: A systematic mapping study. Cybersecurity, 9(1). https://doi.org/10.1186/s42400-025-00234-x
Venson, E. (2024). The effects of required security on secure software development cost estimation. Journal of Systems and Software, 210, 111956. https://doi.org/10.1016/j.jss.2023.111956
Zhang, Y., Li, Y. & Liu, J. (2022). Risk-based software quality assurance model for critical systems. Software Quality Journal, 30, 1247–1271. https://doi.org/10.1007/s11219-022-09576-3