Raphael Wäspi: Quantitative Maturity Assessment of DevSecOps Practices Using Metrics; Universität Zürich, Communication Systems Group, Department of Informatics, Zürich, Switzerland, August 2024, URL: https://files.ifi.uzh.ch/CSG/staff/vonderassen/extern/theses/is-waespi.pdf.