Components of PMITS

 Define the project

 Determine what role network security plays
 Brainstorm various security solutions
 Determine the limitations of these solutions
 Draft a corporate security project plan
 Prepare the success metrics
 Determine the limitations of the project
 Check the business strategy and that of IT security
 Check feasibility of IT security project implementation with work culture and
policies

Organizing or initiating the IT security

project

 List the stakeholders in PMITS

 Evaluate and summarize the team development plan
 Determine the requirements specification for the IT security project
 Determine the objectives
 Determine the processes
 Check and determine the issue tracking and management systems
 Understand the approval filters and processes

Setting up the IT security project team

 Determine the PMITS team requirements

 Determine the skill set needed to execute the IT security project
 Determine the roles and responsibilities of the individual team members
 Check the reporting structure needed
 Check for the budget and policies when it comes to recruiting for the team
 Identify the limitation involved in staffing for the IT security project
 Chalk out the process of hiring (with HR)
 Determine how you will develop the IT team
 Planning the IT security project

 Determine the amount and magnitude of the work to be carried out in PMITS
 Check the scope of the project defined
 Break down the activities to be conducted in smaller tasks and sub-tasks
 Put up descriptions for each task and sub-task
 Determine the quality and value adding stream and the value depreciating stream
 Check adherence to government rules and regulations
 Determine the risks, budget, schedule, and communication plans before
commencing

Managing the IT security project

 Start the project with a bang

 Determine how to calculate piece by piece of success
 Determine how to organize and present data on success
 Check for the documentation and guidelines necessary for the IT security project
 Indulge in risk management
 Determine how change management will take place with PMITS
 Determine the testing units and sessions

Implementing quality into the IT security

project

 Determine the level of quality needed by the business

 Determine the gap between current process quality and optimum or ideal process
quality
 Put in place quality metrics
 Enforce standard operational quality for the IT security project
 Put in place systems to measure and flag quality milestones
 Enforce quality control and assurance parameters
 Closing the IT security project

 Determine what slates the IT security project as completed with regard to PMITS
 Brainstorm how to close or pending, open issues and requests for changes
 Prepare a closure statement and report
 Prepare for deployment/implementation of the success of the IT security project
 Handover the reins to operation managers to carry out the change implemented
 Prepare a solid compliance report

Defining a monitoring and controlling

system for the IT project implementation

 Define a continuous monitoring strategy for the project

 Clearly check for all legal adherences and feasibilities
 Understand laws pertaining to unauthorized access
 Understand penetration testing and security auditing
 Know the reasons for security breaches
 Know the factors compromising corporate IT data security
 Understand IT infrastructure security assessment
 Determine the mitigations strategies and risks involved
 Understand the Health Insurance Portability and Accountability Act 195 Sarbanes-
Oxley Act

Generalized IT security plans

Generalized IT security planning would include many generic actions that are needed as
key actions for the successful completion and implementation of the IT security project as
the PMITS. These would include the following:

 Stages of auditing
 The role that security assessment and auditing carried out during the length of
the project
 The resources that need these set of audits
 Risk assessment processes such as penetration testing and scanning for
vulnerability
 Authentication and access control
 Entries within reports to different stakeholders and executives
 Project parameters and metrics
 Work breakdown structure (WBS)
 Assessment and audit reports
 Impact analysis of the IT security project plan
 Constraints of the set project plan
 Guidelines for all processes
 Guidelines for wireless audits
 Wireless threats and solutions

Operational IT security plans

 The role of operational security assessment and auditing carried out during the
length of the project
 Set up incident reporting and response processes
 Build a response team for operational security
 Understand all regulatory issues
 Understand all operational security policies
 Determine disaster recovery processes for IT operational security
 Explain the different IT operational security parameters
 Risks and mitigation strategies to be employed
 Constraints that can hamper the operational security and assumptions that need
to be made
 Determine the impact of Health Insurance Portability and Accountability Act,
Gramm-Leach-Bliley Act, and Sarbanes-Oxley Act on IT operational security