DESIGNING A CYBERSECURITY MAINTENANCE FRAMEWORK FOR WEB SERVICES TRANSFORMATION

Firkhan Ali bin Hamid Ali , Khairul Amin bin Sukri , Mohd Helmy bin Abd Wahab and Khairul Anwar bin Sedek

doi:10.7492/0qear687

Authors

Firkhan Ali bin Hamid Ali , Khairul Amin bin Sukri , Mohd Helmy bin Abd Wahab and Khairul Anwar bin Sedek Author

DOI:

https://doi.org/10.7492/0qear687

Keywords:

Cybersecurity, Maintenance, Web Services, Web Security

Abstract

As web services evolve from monolithic architectures to dynamic cloud-native environments, organizations face escalating security vulnerabilities. While digital
transformation offers flexibility and scalability, these benefits are frequently undermined by complex information security challenges and misconfigurations. This
study proposes an innovative Cyber Security Maintenance Framework (CSMF) designed to secure web services during and after transformation. Grounded in a
pragmatic paradigm and utilizing a qualitative-to-quantitative methodology, the research identifies five critical components: Web Asset Identification, Web Security
Breach Identification, Web Security Offensive Protection, Web Security Defensive Protection, and Web Security Objectives. Data collected from 41 IT practitioners
in Malaysian public universities validated these components through high-frequency Likert scale responses. The findings indicate that proactive maintenance,
integrated within DevOps pipelines and aligned with international standards such as ISO/IEC 27001 and NIST, significantly enhances system integrity and anomaly detection.