Towards a Taxonomy of Challenges in Security Control Implementation

Published in 2024 Annual Computer Security Applications Conference (ACSAC), 2024

This paper proposes a taxonomy of challenges in implementing security controls, based on observations from practice and prior work in the area.