Chapter 3 - Organizing the IT Security Project

Abstract

All projects require organization before they can be fully planned and implemented. This chapter looks at some of the most common methods used for organizing Information Technology (IT) security project plans. Once the organizing phase for the corporate IT security plan is complete, it identifies the details of the project. There are some elements of IT security project plans that are different from other projects. Errors and omissions in this area could have a serious impact on your security and, therefore, on business. A project team can help in organizing project appropriately, especially if key stakeholders in the project organizing process are included. Identifying and including key stakeholders will help support the project's success. Additionally, stakeholders can provide vital input as to the project's requirements so that the final project plan reflects user, functional, technical, organizational, and regulatory requirements. Once requirements are identified, the project's objectives can be created, which then describes the project's scope. The necessary planning takes a lot of time on the front end doing, but is a wise investment that will pay dividends on the back end.