Auditing Low-Code and No-Code Platforms Securing Citizen Development

Abstract

Low-code and no-code applications are increasingly becoming the technology of choice for many professionals in the digital workplace. According to Gartner data, 70% of new apps built by enterprises will employ low-code or no-code technologies by 2025, up from less than 25% in 2020. The proliferation of these platforms is fueling the rise of citizen development. The objective of this chapter is to discuss briefly how they are different from our traditional software development and evaluate the risks, vulnerabilities, threats, and security concerns associated with auditing them. Also, after assessing these risks, the authors will identify controls that can be used to mitigate these risks. The key security concerns and proposed security measures to safeguard low-code/no-code platforms were analyzed using a systematic approach. The study concluded that, while these platforms provide several advantages, they also pose new security issues that must be addressed. The outcomes of this research can assist businesses in making educated decisions about employing low-code/no-code platforms.