Project Management and Information Security

1. Project Management and Information Security Approaching Security as a project

2. Project Management • Information security is a process, not a project • However, each element of a security program can be managed as a project (managed processes)

3. Project Management • The application of knowledge, skills, tools, and techniques to project activities to meet project requirements • Application to Security • Use of PMBoK • The Project Management Institute (PMI) Cert. • The Project Management Professional (PMP) • Certified Associate in Project Management (CAPM)

4. Example of a Project Management Team and Security • Members of the development team • Champion • Team leader • Security policy developers • Risk assessment specialists • Security professionals • Systems administrators • End users Management of Information Security, 3rd Edition

5. Project Management Book of Knowledge (PMBoK) Source: Course Technology/Cengage Learning

6. PMBoK KA – Project Integration • Project integration management • Includes the processes required to coordinate occurs between components of a project • Elements requiring integration: • Project Plan Development • Progress Monitoring • Revision Control • Resource Allocation Control

7. PMBoK KA – Project Integration • Project plan development • The process of integrating all of the project elements into a cohesive plan • Core components: • Work time • Resources • Deliverables

8. PMBoK KA – Scope Management Ensures that project plan includes only those activities necessary to complete it. • Major processes: • Initiation • Scope Planning • Definition • Verification • Change Control

9. PMBoK KA – Time Management Ensures that project is finished by identified completion date while meeting objectives Includes: • Activity definition • Activity sequencing • Activity duration estimating • Schedule development • Schedule control

10. PMBoK KA – Cost Management Ensures that a project is completed within the resource constraints Includes: • Resource planning • Cost estimating • Cost budgeting • Cost control

11. PMBoK KA – Quality Management Ensures project meets project specifications Includes: • Quality planning • Quality assurance • Quality control Software bugs account for about 40% computer systems failure

12. PMBoK KA – HR Management Ensures personnel assigned to project are effectively employed Includes: • Organizational planning • Staff acquisition • Team development Management of Information Security, 3rd Edition

13. PMBoK KA – Communications Management Conveys details of project activities to all involved Includes: • Communications planning • Information distribution • Performance reporting • Administrative closure

14. Stakeholder Analysis for Project Communications

15. PMBoK KA – Risk Management Assesses, mitigates, manages, and reduces the impact of adverse occurrences on the project Includes: • Risk identification • Risk quantification • Risk response development • Risk response control

16. PMBoK – Project Procurment Acquiring needed project resources Includes procurement planning, solicitation planning, solicitation, source selection, contract administration and contract closeout

17. Projectitis Occurs when the project manager spends more time documenting project tasks, collecting performance measurements, recording project task information, and updating project completion forecasts than accomplishing meaningful project work

18. Project Mgmt Tools:Work Breakdown Structure • Work breakdown structure (WBS) • Simple planning tool for creating a project plan • Determine minimum attributes for each task • As the project plan develops, additional attributes can be added • Work phase after WBS is completed

19. Work Breakdown Structure: Determine minimum attributes for each task Table 1-2 Early draft work breakdown structure Source: Course Technology/Cengage Learning

20. WBS: Include additional attributes Source: Course Technology/Cengage Learning

21. Task Sequencing Approaches: PERT Source: Course Technology/Cengage Learning

22. Task Sequencing Approaches: PERT • Three key questions: • How long will this activity take? • What activity occurs immediately before this activity can take place? • What activity occurs immediately after this activity? • Determine the critical path • Slack time

23. Task Sequencing Approaches: PERT • Advantages • Disadvantages

24. Task Sequencing Approaches: PERT

25. Task Sequencing Approaches: Gantt • Gantt chart • Easy to read and understand; easy to present to management • Easier to design and implement than the PERT diagrams, yielding much of the same information • Lists activities on the vertical axis of a bar chart, and provides a simple time line on the horizontal axis

26. Task Sequencing Approaches: Gantt Figure 1-11 Project Gantt chart Source: Course Technology/Cengage Learning

27. Automated Project Tools • Microsoft Project • A widely used project management tool • Keep in mind: • A software program is no substitute for a skilled and experienced project manager • A software tool can get in the way of the work • Choose a tool that you can use effectively