International Journal of Cyber Security, Cloud & Engineering Research
International Journal of Cyber Security, Cloud & Engineering Research Journal Particulars Details Journal Title International Journal of Cyber Security, Cloud & Engineering Research (IJCSCER) Publisher Wissira Research Lab LLC ISSN (Online) Request Pending Starting Year 2024 Publisher Address Carmel, Indiana, United States – 46074 Official Email editor@wissira.us Website https://ijcscer.org Language English Publication Format Online Access Model Open Access Main Subject Cyber Security Scope Cyber Security, Cloud Computing & Engineering Research Copyright Copyright remains with the Journal and/or Authors as specified in the publication agreement Peer Review Double-Blind Peer Review Publication Type International Scholarly Research Journal Journal Overview The International Journal of Cyber Security, Cloud & Engineering Research (IJCSCER) is an international peer-reviewed open-access journal dedicated to publishing innovative, high-quality, and impactful research in cybersecurity, cloud technologies, engineering sciences, and emerging digital systems. The journal provides a global platform for researchers, academicians, scientists, engineers, technology professionals, and industry experts to disseminate original research findings, technical advancements, and interdisciplinary studies. IJCSCER aims to foster scientific innovation and technological development by encouraging research that addresses contemporary challenges in secure computing, cloud infrastructures, intelligent systems, digital transformation, and advanced engineering applications. Focus Areas and Specializations Cyber Security Information Security Network Security Cyber Threat Intelligence Ethical Hacking Penetration Testing Digital Forensics Security Operations (SOC) Cyber Risk Management Zero Trust Security Security Governance Cloud Computing Cloud Architecture Cloud Security Multi-Cloud Environments Hybrid Cloud Systems Cloud-Native Applications Serverless Computing Container Technologies Kubernetes Security Edge and Fog Computing Cloud Compliance Artificial Intelligence and Intelligent Systems Artificial Intelligence Machine Learning Deep Learning AI Security Predictive Analytics Natural Language Processing Computer Vision Intelligent Automation Software and Systems Engineering Software Engineering Secure Software Development DevSecOps System Design Enterprise Systems Distributed Computing Microservices Architecture Engineering and Emerging Technologies Computer Engineering Electronics Engineering Communication Systems Internet of Things (IoT) Industrial IoT Blockchain Technology Digital Twins Quantum Computing Security Smart Infrastructure Open Access Statement IJCSCER follows a fully open-access publishing model, ensuring that all published articles are freely available to readers worldwide without subscription fees or access restrictions. This policy promotes global knowledge sharing, academic collaboration, and wider dissemination of scientific research. Mission To provide an internationally recognized platform for the publication of high-quality research that advances cybersecurity, cloud technologies, engineering innovation, and digital transformation while promoting scientific excellence, research integrity, and technological progress. Vision To become a trusted global journal for cutting-edge research in cyber security, cloud computing, engineering sciences, and emerging technologies, supporting innovation and sustainable technological development across academia and industry. Call for Research Articles IJCSCER invites original research papers, review articles, technical reports, case studies, survey papers, and interdisciplinary research contributions from scholars, researchers, industry practitioners, and academic institutions worldwide. Researchers working in Cyber Security, Cloud Computing, Artificial Intelligence, Software Engineering, DevSecOps, Blockchain, IoT, Digital Engineering, and related technological fields are encouraged to submit their manuscripts for consideration. Website: https://ijcscer.org Email: editor@wissira.us Publisher: Wissira Research Lab LLC, United States
Evolution of Secure Code Review Practices in Agile and DevOps Methodologies
Secure code review has evolved significantly in response to the adoption of Agile and DevOps methodologies. These methodologies, characterized by rapid development cycles and continuous integration and deployment, demand equally agile security practices. This study examines how secure code review practices have transitioned from traditional, isolated approaches to integrated, continuous workflows. It analyzes the impact of automation tools, collaborative strategies, and cultural shifts on secure code reviews. Findings reveal that modern secure code review practices enhance security and productivity while addressing the unique challenges of fast-paced development environments. The paper concludes by highlighting the scope for further research in enhancing automation and developer engagement.
Copyright (c) 2026 https://creativecommons.org/licenses/by/4.0
API Security Testing in Microservices: Key Considerations for Developers
Microservices have transformed how software systems are developed, deployed, and managed, offering benefits such as modularity, scalability, and independent development of components. However, this architecture also presents unique security challenges due to the interconnected nature of services, predominantly through APIs. API security is paramount in protecting microservices ecosystems from threats like unauthorized access, data breaches, and denial-of-service attacks. This manuscript explores API security testing in microservices, highlighting critical considerations for developers. It examines common vulnerabilities, presents a comprehensive methodology for security testing, and discusses the results of adopting best practices. By focusing on proactive security measures and continuous testing, this paper provides actionable insights for ensuring robust API security in microservices.
Evaluating the Impact of Security Certifications on Enterprise Application Vulnerability Trends
The rise of enterprise applications has revolutionized organizational operations but has also introduced significant cybersecurity risks. Security certifications, such as ISO 27001, SOC 2, and PCI DSS, are widely adopted as benchmarks for maintaining secure systems. This paper evaluates the impact of these certifications on reducing vulnerabilities in enterprise applications. By analyzing trends across certified and non-certified organizations and examining real-world case studies, the study provides an evidence-based assessment of certifications' effectiveness. Results reveal that while security certifications contribute to improved security hygiene, their implementation often falls short of addressing dynamic and advanced threats. The findings underscore the importance of integrating certifications with adaptive security practices for sustainable risk mitigation.
Privacy-Driven Security: Incorporating GDPR Principles in Application Security Testing
The General Data Protection Regulation (GDPR) has revolutionized how organizations approach data privacy and security. With applications increasingly processing sensitive personal data, ensuring compliance with GDPR while maintaining robust security has become a critical challenge. Application Security Testing (AST) offers a framework to identify and mitigate vulnerabilities in software systems. This manuscript examines the integration of GDPR principles, such as privacy-by-design, data minimization, and accountability, into AST methodologies. A systematic approach to embedding GDPR-aligned practices into AST is proposed, emphasizing practical implementations and measurable outcomes. Results indicate significant improvements in compliance, security posture, and user trust when GDPR principles are rigorously applied during security testing. The manuscript concludes with a discussion on the scope, limitations, and future implications of privacy-driven application security testing.
False Positive Elimination in SAST Tools: Techniques for Improved Accuracy
Static Application Security Testing (SAST) tools play a critical role in software security by identifying vulnerabilities in source code early in the development process. However, their utility is often hampered by the high rate of false positives—incorrect identification of secure code as vulnerable. False positives increase developer workload and erode trust in SAST tools. This manuscript explores the sources of false positives and presents state-of-the-art techniques for their elimination, including machine learning (ML), advanced static analysis techniques, and hybrid methodologies. Experimental results show that implementing these techniques can significantly reduce false positives without sacrificing detection accuracy, enabling more efficient and reliable software development workflows.
Securing Mission-Critical Applications in the Aviation Industry: Case Study and Best Practices
Mission-critical applications in the aviation industry are fundamental to ensuring the safety, efficiency, and reliability of operations. With the increasing reliance on complex software systems and connected technologies, these applications are vulnerable to a wide array of cyber threats, ranging from insider attacks to sophisticated external breaches. This manuscript explores the challenges of securing mission-critical applications in aviation, providing a detailed case study of a recent security breach, followed by an analysis of best practices for strengthening these applications. Through examining existing literature, reviewing successful security strategies, and presenting a methodology for evaluating risk and securing systems, this paper offers a comprehensive approach to maintaining the integrity of aviation applications. The results of implementing recommended practices in a real-world scenario are discussed, showcasing the potential for minimizing risks and enhancing operational resilience.
The Role of Governance, Risk, and Compliance Tools in Application Security Management
The escalating complexity of cybersecurity threats and regulatory requirements has driven organizations to adopt Governance, Risk, and Compliance (GRC) tools as integral components of application security management. GRC tools offer structured frameworks for managing security risks, ensuring regulatory compliance, and strengthening organizational governance. This manuscript explores the multifaceted role of GRC tools in enhancing application security, focusing on their integration with industry standards, risk mitigation strategies, and policy enforcement. Through an extensive review of existing literature and an analysis of real-world applications, this study illustrates the transformative impact of GRC tools. The findings highlight how organizations can leverage these tools to foster proactive risk management, streamline compliance processes, and improve overall application security resilience.
Comparative Analysis of OWASP Mobile Top 10 Mitigation Strategies
Mobile applications dominate the digital landscape, facilitating diverse functionalities, but their vulnerabilities pose significant security risks. The Open Web Application Security Project (OWASP) Mobile Top 10 serves as a critical framework for identifying and mitigating these risks. This manuscript provides a comprehensive comparative analysis of mitigation strategies for the OWASP Mobile Top 10 vulnerabilities. Using an extensive review of existing literature, a structured methodology, and real-world case studies, this study evaluates the effectiveness, feasibility, and adoption barriers of these strategies. Results reveal that no single approach can address all vulnerabilities; rather, a combination of technological advancements, secure development practices, and organizational policies is necessary. This work aims to assist developers, organizations, and security practitioners in making informed decisions to strengthen mobile application security.
Real-Time Remediation Support: Automating Developer Assistance in CI/CD Pipelines
Continuous Integration and Continuous Deployment (CI/CD) pipelines are foundational to modern software development, enabling frequent and reliable code delivery. However, the complexity of these pipelines often introduces challenges, particularly when addressing errors and failures in real time. This study explores the development of a realtime remediation support system to assist developers in diagnosing and resolving issues within CI/CD workflows. By leveraging automation, machine learning models, and domainspecific knowledge bases, the proposed framework enhances error detection, categorization, and resolution. The results indicate significant reductions in mean time to resolution (MTTR) and improved developer efficiency. This manuscript outlines the problem, reviews existing literature, and details the methodology, results, and conclusions of the study.
Designing Resilient Security Architectures for Legacy and Modern Applications
In the digital era, organizations face an increasing challenge in securing both legacy and modern applications against evolving cyber threats. The complexity of managing legacy systems with outdated security measures alongside modern applications built on new technologies requires a strategic approach to ensure resilience, scalability, and comprehensive security. This manuscript explores the design of resilient security architectures for both legacy and modern applications. It examines the inherent security challenges in legacy systems, the unique security needs of modern applications, and provides a unified framework for addressing these challenges. A combination of traditional security measures and modern techniques such as cloudbased security solutions, microservices architecture, and zero-trust models are proposed to build a holistic and adaptable security framework. The findings highlight the importance of balancing security innovation with legacy system constraints, ensuring both operational continuity and robust protection against threats.
DevSecOps Maturity Models: Evaluating Implementation Effectiveness in Large Enterprises
DevSecOps, the integration of security practices within the DevOps process, aims to bridge the gap between development, security, and operations teams. This paradigm shift is essential for improving software development cycles while enhancing security and compliance. However, large enterprises face distinct challenges in implementing DevSecOps due to the complexity of their infrastructure, processes, and organizational culture. This manuscript evaluates the effectiveness of DevSecOps maturity models in large enterprises, with a particular focus on their impact on security posture, operational efficiency, and overall organizational alignment. The study synthesizes findings from various case studies and academic research to propose a framework that assesses the maturity of DevSecOps practices and provides actionable insights into overcoming common challenges. This research contributes to the understanding of how large enterprises can achieve successful DevSecOps implementation and maturity.
The Role of AI in Predictive Threat Modeling for Enterprise Applications
Enterprise applications are essential for modern organizations but are increasingly exposed to sophisticated cyber threats. Predictive threat modeling (PTM), powered by Artificial Intelligence (AI), is emerging as a vital strategy to enhance security frameworks by identifying vulnerabilities before they can be exploited. This paper explores the integration of AI into PTM, discussing its methodologies, tools, benefits, and challenges. A detailed review of existing frameworks, case studies, and experimental results highlights how AI improves the precision and scalability of PTM systems. Finally, the paper concludes by emphasizing the transformative potential of AI in enterprise cybersecurity and suggesting pathways for future research and implementation.
Application Security for Serverless Architectures: Challenges and Solutions
The rise of serverless computing has transformed the way applications are developed and deployed, offering numerous advantages such as scalability, cost-efficiency, and reduced infrastructure management. However, serverless architectures introduce unique security challenges that need to be addressed to ensure robust and secure application environments. This paper explores the security challenges faced by organizations adopting serverless architectures, identifies potential vulnerabilities, and examines existing security solutions. We also present statistical analysis based on a survey conducted among cloud security professionals regarding their concerns and approaches to securing serverless applications. The paper concludes with recommendations for improving security practices in serverless environments.
Evaluating the Effectiveness of Static Analysis in Addressing SANS 25 Vulnerabilities
The security of software systems is paramount in ensuring the protection of sensitive data and maintaining the integrity of applications. Static analysis, a widely used software vulnerability detection method, has proven to be effective in identifying and mitigating vulnerabilities. This research investigates the effectiveness of static analysis tools in addressing the security weaknesses outlined in the SANS 25 (Top 25 Most Dangerous Software Errors). Through a detailed methodology involving multiple static analysis tools, vulnerability scans, and case studies of software applications, this paper explores the strengths and limitations of static analysis in detecting critical vulnerabilities. A comprehensive statistical analysis is also provided to quantify the effectiveness of static analysis tools. The findings of this study contribute valuable insights into the integration of static analysis for improved software security practices.
Zero Trust Architecture in Application Security: Principles and Implementation
Zero Trust Architecture (ZTA) represents a paradigm shift in network security, emphasizing a model that no one, whether inside or outside the organization, is trusted by default. This paper explores the principles, implementation strategies, and benefits of applying Zero Trust in application security. The adoption of Zero Trust requires a comprehensive understanding of its foundational concepts, technology requirements, and real-world implementation in application security. The research discusses the integration of authentication, authorization, and continuous monitoring to protect sensitive applications and data. Case studies and examples are provided to highlight how Zero Trust can be successfully implemented and the challenges faced during this process. The paper concludes by discussing the future prospects of Zero Trust Architecture in the evolving landscape of cybersecurity.
Penetration Testing Automation: Accelerating Security Without Sacrificing Depth
Penetration testing (pen testing) is a critical activity within cybersecurity aimed at evaluating the security posture of a system, network, or application by simulating real-world cyberattacks. However, manual penetration testing can be time-consuming and may not scale effectively, particularly in environments that demand frequent testing. Automation in penetration testing has emerged as a promising solution, offering increased efficiency and broader coverage without sacrificing depth. This manuscript explores the evolution of penetration testing, the advantages and challenges of automation, and presents a detailed methodology for achieving effective automated pen testing. The study also includes a statistical analysis that evaluates the efficiency, effectiveness, and accuracy of automated penetration testing tools in comparison to traditional manual approaches. The findings suggest that while automation accelerates penetration testing, it requires careful integration with human expertise to ensure comprehensive coverage.
OWASP Top-10 in 2024: Emerging Threats and Mitigation Strategies
The Open Web Application Security Project (OWASP) is a globally recognized authority in identifying and addressing the top security threats facing web applications. As the digital landscape evolves, so do the security challenges. The OWASP Top-10 list, updated annually, serves as a benchmark for developers and organizations to prioritize cybersecurity risks and formulate strategies to mitigate them. The 2024 edition introduces emerging threats driven by technological advancements, evolving attack methodologies, and more sophisticated adversaries. This manuscript examines the OWASP Top-10 for 2024, with a focus on the latest threats, their potential impact, and effective mitigation strategies that organizations can employ to secure their web applications. It also explores how these risks are shaped by modern trends like AI, cloud computing, and the growing complexity of web ecosystems.
Vulnerability Management Metrics: Measuring Success in Enterprise Security Programs
Vulnerability management is a critical aspect of enterprise security programs, serving as a foundation for preventing, identifying, and mitigating potential threats to organizational assets. This paper explores various vulnerability management metrics employed by enterprises to gauge the success and effectiveness of their security programs. A structured analysis is conducted to determine which metrics provide the most accurate reflection of security posture and organizational risk. The study presents key findings related to how organizations utilize these metrics to inform decision-making and prioritize resources in an ever-evolving threat landscape. Ultimately, this work highlights the role of vulnerability management metrics in shaping a proactive security environment, offering recommendations for future research and implementation strategies.
Interactive Application Security Testing (IAST): Bridging the Gap Between SAST and DAST
With the increasing threats in the digital landscape, securing software applications is a critical requirement for organizations. Traditional security testing methods such as Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) have been used for identifying vulnerabilities in applications, but they each have their limitations. Interactive Application Security Testing (IAST) is a new approach that combines the strengths of both SAST and DAST, providing real-time insights into vulnerabilities during runtime without the need for a full application scan. This manuscript explores IAST as a bridge between SAST and DAST, addressing their individual shortcomings while enhancing the accuracy and speed of application security testing. We analyze the methodology, implementation, statistical analysis, results, and the future potential of IAST in the realm of software security.
Securing Open Source Dependencies with Advanced Software Composition Analysis (SCA)
Open-source software (OSS) has become a cornerstone of modern development, offering both flexibility and cost-efficiency. However, the widespread use of open-source dependencies introduces significant security risks, particularly vulnerabilities inherited from third-party libraries. Software Composition Analysis (SCA) has emerged as a critical tool for identifying, managing, and securing these dependencies. This paper explores advanced techniques in SCA, emphasizing the importance of proactive risk mitigation, real-time vulnerability scanning, and the implementation of secure development practices. The integration of machine learning and automated patch management in SCA tools offers promising improvements in safeguarding applications. The research evaluates current methodologies and proposes a framework for enhanced security through intelligent dependency management and continuous monitoring.
Compliance-Driven Security: Meeting PCI and HIPAA Standards in Agile Development Environments
In the face of evolving cybersecurity threats and increasing regulatory requirements, businesses handling sensitive information must integrate compliance standards like Payment Card Industry (PCI) and Health Insurance Portability and Accountability Act (HIPAA) into their development practices. Agile development methodologies, known for their flexibility and speed, often pose challenges in meeting the stringent compliance requirements set by these regulations. This paper explores the challenges, methodologies, and strategies used to ensure that Agile development processes meet PCI and HIPAA standards while maintaining security. A statistical analysis of the relationship between compliance integration and development efficiency is presented, alongside a comprehensive methodology for achieving compliance without compromising on Agile principles. The study concludes by highlighting key practices for businesses to follow and outlining potential future developments in this area.
Role of Threat Modeling in Preemptive Application Security Engineering
Threat modeling plays a pivotal role in enhancing the security posture of applications by identifying potential security threats before they materialize. In a world where cyberattacks are becoming increasingly sophisticated and frequent, preemptive application security engineering is essential for safeguarding sensitive data, maintaining system integrity, and ensuring the safety of users. This paper explores the importance of threat modeling as a proactive approach in the application security lifecycle, analyzing the different methodologies, tools, and best practices used in the identification, assessment, and mitigation of risks. By emphasizing the integration of threat modeling into the development process, this paper highlights its impact on reducing vulnerabilities and improving overall application security.
A Comparative Study of Open Source vs. Commercial Application Security Testing Tools
Application Security Testing (AST) is critical in identifying and mitigating vulnerabilities within software applications. With the growing concerns over data breaches and cyber-attacks, there is an increasing demand for robust application security solutions. This paper explores and compares the efficacy of Open Source and Commercial Application Security Testing Tools. We analyze these tools based on criteria such as functionality, cost, ease of integration, and accuracy in vulnerability detection. The study evaluates various tools in each category and presents a comparative analysis to help organizations choose the appropriate solution based on their requirements and resources. This paper concludes with insights into the advantages and disadvantages of both types of tools, emphasizing that the choice of tool depends on specific organizational needs, security requirements, and budget constraints.
SAST and DAST Integration Strategies for Scalable CI/CD Workflows
As the demand for faster and more secure software development increases, integrating Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) into Continuous Integration/Continuous Deployment (CI/CD) workflows has become crucial. These tools help ensure the security of applications by identifying vulnerabilities early in the software development lifecycle (SDLC). However, integrating SAST and DAST effectively into CI/CD processes presents several challenges, including performance overhead, false positives, and the scalability of security testing in large, complex environments. This paper explores integration strategies for SAST and DAST that maximize security, speed, and scalability within CI/CD workflows. By evaluating existing solutions, proposing a hybrid strategy, and testing with a case study, we provide valuable insights into optimizing security testing in automated environments.
Application Security Automation in Hybrid Cloud Architectures
The integration of hybrid cloud architectures in modern enterprise systems has brought a host of advantages such as scalability, flexibility, and cost optimization. However, these benefits come with significant security risks that necessitate robust measures for protection against evolving cyber threats. Application security automation is becoming an essential approach to address security challenges in hybrid cloud environments. This manuscript explores the role of automation in securing applications within hybrid cloud systems, examining current trends, challenges, and solutions. It delves into various tools and strategies for automating security tasks such as vulnerability scanning, threat detection, and incident response. By leveraging automation, organizations can ensure that security policies are consistently applied across both on-premise and cloud-based infrastructure, significantly reducing the risk of security breaches. This paper discusses methodologies for implementing automated security systems in hybrid clouds and presents the outcomes of real-world implementations, highlighting the improvements in efficiency, security posture, and compliance.
Dynamic Vulnerability Scanning: Best Practices for Modern Web Applications
Dynamic vulnerability scanning is an essential process for identifying potential security threats in modern web applications. This method scans web applications while they are running, identifying vulnerabilities that could be exploited by attackers. As web applications become more complex, with dynamic user interactions and ever-evolving technologies, it is imperative to utilize best practices for effective vulnerability scanning. This research highlights the significance of dynamic vulnerability scanning, the common threats it mitigates, and the latest techniques and tools available for organizations to secure their web applications. Key findings suggest that regular and comprehensive scanning, along with automated tools and manual validation, can significantly reduce security risks.
Enhancing DevSecOps Practices: Bridging Development and Security for CI/CD Pipelines
The increasing adoption of DevOps practices in software development has made Continuous Integration (CI) and Continuous Deployment (CD) pipelines indispensable for modern software engineering. However, security is often an afterthought in such practices, leading to vulnerabilities that are exploited in production environments. This paper explores the integration of security into the CI/CD pipelines, a practice known as DevSecOps. By introducing security early in the development lifecycle, DevSecOps ensures a proactive security posture without compromising the speed and efficiency of development cycles. We present a comprehensive analysis of DevSecOps principles, challenges, and best practices. Furthermore, we explore the current methodologies and frameworks being employed to effectively bridge the gap between development and security. Finally, we propose improvements and strategies to enhance the current DevSecOps practices, including statistical analysis on the impact of DevSecOps adoption on software security and development timelines.
Cross-Industry Comparison: WMS Applications in Retail vs. Pharmaceuticals
Warehouse Management Systems (WMS) are critical tools for optimizing inventory management, enhancing operational efficiency, and ensuring accuracy in both retail and pharmaceutical industries. The primary purpose of this manuscript is to compare the applications of WMS in the retail and pharmaceutical sectors, analyzing how each industry utilizes WMS differently due to their unique operational, regulatory, and logistical needs. The study highlights key features of WMS, the role of technology in inventory management, and the challenges faced in both industries. Using both qualitative and quantitative methodologies, the paper provides a comprehensive analysis of WMS adoption, implementation, and outcomes. Key findings demonstrate that while both sectors benefit from WMS, the pharmaceutical industry’s need for strict regulatory compliance and batch traceability leads to a more specialized approach compared to retail. The research concludes with recommendations for optimizing WMS applications tailored to the specific needs of each industry.
Warehouse Sustainability Goals: The Role of Warehouse Management Systems (WMS) in Carbon Footprint Reduction
The growing global emphasis on sustainability has driven industries to adopt innovative technologies for reducing their environmental impact. Among the various sectors contributing to carbon emissions, warehouses play a significant role due to their energyintensive operations. Warehouse Management Systems (WMS) are pivotal in streamlining logistics and operations, improving efficiency, and enabling warehouses to contribute to sustainability goals. This paper investigates how WMS can facilitate the reduction of the carbon footprint in warehouse operations through optimization of energy usage, transportation, inventory management, and waste reduction. By examining current trends, practices, and case studies, the research demonstrates the potential of WMS in achieving warehouse sustainability goals. The findings reveal that integrating advanced WMS technologies significantly reduces energy consumption, carbon emissions, and waste while enhancing overall operational efficiency.
Impact of Regulatory Compliance on Global WMS Implementations
The implementation of Warehouse Management Systems (WMS) has revolutionized supply chain operations worldwide. However, the regulatory environment in different regions poses both challenges and opportunities for the successful deployment and ongoing operation of WMS. This paper explores the impact of regulatory compliance on global WMS implementations, focusing on the unique compliance requirements in various countries and industries. The study highlights the strategies that businesses can adopt to ensure regulatory compliance while optimizing WMS performance. The research identifies the key factors influencing WMS implementation success, such as legal frameworks, data privacy laws, trade compliance, and environmental regulations. The findings of this study underscore the need for businesses to integrate regulatory compliance into the early stages of WMS design and deployment to minimize operational disruptions and mitigate risks.