300 likes | 504 Views
Project Management A Boots on the Ground Perspective. AFCEA TechNet Tokyo 2014 Gary Haddeman, CISSP, CRISC, RTPM, IAO. Agenda. What is a project? What is Project Management/IT Project Management? Five Steps Importance of Stakeholders Risk Management Security. References.
E N D
Project ManagementA Boots on the Ground Perspective AFCEA TechNet Tokyo 2014 Gary Haddeman, CISSP, CRISC, RTPM, IAO
Agenda • What is a project? • What is Project Management/IT Project Management? • Five Steps • Importance of Stakeholders • Risk Management • Security
References • Project Management Body of Knowledge (PMBOK) • DoDD/DoDI 8500 Series • NIST Publications • E.O. • ASD/DISA/JCS/DNI/NSA &tc • http://iac.dtic.mil/csiac/download/ia_policychart.pdf
A Project is… • A temporary endeavor to create a unique product, service or result • Temporary means there is a beginning, and, you guessed it, an end!
Projects are Constrained by… COST SCOPE TIME
Project Management is… • The application of knowledge, skills, tools, and techniques to project activities to meet the project requirements • Successful project management could be on time, on schedule and within budget… • If you deliver what the customer wants! • When the customer needs it…
IT Project Management • IT Projects are challenging • Can exhibit scope creep more than standard projects • requirements are not clearly defined • IT Projects differ from conventional types in that: • Deliverables may be intangible • Simultaneous projects are linked together • Same people performing design are implementing • The Department of _______ all have the same problem
The 5 Steps are… • Initiating – Project Charter • Planning – PM Plan • Execution – Deliverable • Monitoring & Controlling – Corrective Action • Closeout – Paycheck! (Acceptance)
Stakeholders are Important… • They provide the authority for the project • They pay the bills • They are the customers • They are the users • They are the project team But • Sometimes they don’t know the requirements • And, what do they really want, anyway?
Risk Management • Risk is always in the future • Risk is an uncertain event or condition that, if it occurs, has an effect on at least one project objective • Objectives are scope, schedule, cost, and quality • More than one cause => more than one effect BLAB – What can impact the project and it still remain viable?
Risk Management (cont) • Risk Analysis • Identify • what could go wrong? • Qualify • probability and impact • Quantify • rate the risk, prioritize • Response • negative and positive • Verify • Was mitigation successful or not?
Risk Management Responses… Insurance Reduce Scope Contractual Avoidance Terminate Transference Passive Schedule Warranty Accept Active ↓Probability Mitigation Exploit Enhance ↓Impact Accept Share
You see anything wrong with this situation? RISK MITIGATION
Risk Management (cont) Just accept it…
Positive Risk?! • Exploit – realize the opportunity • Share – benefit for project • Enhance – increase the probability/+impact of an opportunity • Accept – eh, ok, I’ll do it…
IT Projects • Involve some or all of the following: • Physical Security • Information Security • Information Assurance • Operational Security • National Security • The plethora of publications, policies, pamphlets, portfolios, plans, procedures and processes can be overwhelming
IT Project References • The following is a list of just a few…
Build and Operate a Trusted DoDIN • ~210 Separate Publications • Most related to Cybersecurity • Financial Management • Acquisition • Law • Security Triad (CIA)
Policies & Issuances • Govern DoD Information Technology • Projects, systems, technology • Acquisitions • Implementation • Operations • Stuff a savvy IT Project Manager should know • Right?!?
Things to consider… • Who ordered it? • When is it coming? • Is it accredited? Approved? • Are resources provided? • Funding? • Lifecycle sustainment? • O&M requirements
Most Importantly… DOES IT WORK?!