# Secure Global Software Development: A Practitioners' Perspective
## 4 Results and Analysis
The company must establish the change management strategy with the approval of all stakeholders. This strategy must be \begin{table}
\begin{tabular}{l l l l} \hline \hline
**PID** & **Practice Name** & **Freq** & **SDLC Phase** \\ \hline RE8 & Perform Requirement prioritization \& classification & 39 & RE \\ \hline RE3 & Identify requirement dependencies & 34 & RE \\ \hline RE7 & Elicit security requirements & 27 & RE \\ \hline RE6 & Identify possible risks & 24 & RE \\ \hline RE4 & Identify threat & 23 & RE \\ \hline D7 & Apply the multilevel security concepts of defense in depth. & 23 & Design \\ \hline D1 & Utilize the economy of mechanism idea to make your design simple & 22 & Design \\ \hline D8 & Perform a secure design review to validate the design & 22 & Design \\ \hline C5 & Always validate input before accepting it & 23 & Coding \\ \hline C1 & Use a secure coding checklist and best practices to do secure coding. & 22 & Coding \\ \hline C6 & Use sanitization techniques in coding & 22 & Coding \\ \hline T3 & Perform functional testing & 32 & Testing \\ \hline T2 & The results of the requirement phase should be used to develop test cases. & 27 & Testing \\ \hline T5 & Perform integration testing & 22 & Testing \\ \hline DP2 & Follow the change management process & 33 & Deployment \\ \hline DP1 & Document change management process & 26 & Deployment \\ \hline \hline \end{tabular}
\end{table} 
Table 3: Significant GSD security practices. executed to ensure customer happiness. Figure 4 depicts the frequency of GSD security practices deemed to be of the utmost importance by practitioners who participated in the assessment. **RQ2:** Is there a correlation between the size of the GSD organization and identified security practices? The GSD specialists who participated in this research come from a diverse range of businesses of various sizes. Some come from very tiny organizations with only a handful of workers, while others come from huge companies with hundreds of individuals in their workforce. To classify the businesses according to their size, we used the organizational size concepts presented in papers [29; 39]. We classified businesses according to their workforce size as follows: small (20 to 99 workers), medium (100 to 199 employees), and large (200 or more employees). The responses from GSD industry professionals working for firms of these three sizes were recorded. There are 54 participants, 4 of whom are specialists from small businesses, 27 from medium-sized businesses, and 23 from large businesses. Throughout their careers, some practitioners moved from one company to another several times; nonetheless, we considered their comments based on the size of the companies now represented by the respondents. Figure 5 shows the frequency of employees from varying company sizes who consider the selected GSD security practices highly important. According to the findings presented in Figure 5, there is a disparity between the significance of a particular practice when the size of the company varies. For instance, only one-fourth (25%) of the respondents from small companies thought that RE3 was extremely important, while 19/27 (56%) of the respondents from medium companies and 14/23 (61%) of the respondents from large companies thought that it was extremely important. In the same way, variation exists in the opinions of experts from different categories (small, medium, large) for the remaining secured GSD practices. We utilized a Chi-square test of independence to investigate whether or not there was a correlation between the size of GSD companies and highly important GSD security practices. To do so, we formulated the following null and alternate hypotheses. Figure 4: Important GSD security practices with high frequency. \(H_{0}\) = There is a correlation between company size and identified security practices. \(H_{1}\) = There is no correlation between company size and identified security practices. The formula used to calculate Chi-sqr is shown in Equation (1).