Syngress IT Security Project Management Handbook (eBook)

Cover 1
Contents 13
Foreword 27
Acknowledgments 28
Chapter 1: IT Security Project Management Building Blocks 29
Introduction 30
Corporate Security Project Plan Components 31
The True Cost of Security 32
Project Success Factors 43
Project Constraints 49
Corporate Strategy and IT Security 51
How Corporate Culture and Policies Impact IT Security 52
Chapter 2: Defining the Security Project 59
Introduction 60
Defining the Security Problem 60
Defining the Outcome 65
Defining Potential Security Project Solutions 66
Defining the Optimal Security Project Solution 67
Applying Security Project Constraints 68
Developing the Security Project Proposal 72
Identifying the Security Project Sponsor 73
Chapter 3: Organizing the IT Security Project 79
Introduction 80
Identifying the IT Security Project Team 80
Identifying IT Security Project Stakeholders 81
Defining IT Security Project Requirements 83
Defining IT Security Project Objectives 87
Defining IT Security Project Processes 89
Chapter 4: Building Quality Into IT Security Projects 103
Introduction 104
Planning IT Security Project Quality 104
Monitoring IT Security Project Quality 113
Testing IT Security Project Quality 116
Chapter 5: Forming the IT Security Project Team 123
Introduction 124
Identifying IT Security Project Team Requirements 124
Identifying Staffing Requirements and Constraints 133
Acquiring the Needed Staff 135
Forming the IT Security Project Team 136
Chapter 6: Planning The IT Security Project 145
Introduction 146
Creating the IT Security Project Work Breakdown Structure 146
Defining Project Tasks and Sub-tasks 149
Checking Project Scope 151
Developing Task Details 153
Identifying and Working With the Critical Path 163
Testing IT Security Project Results 164
Budget, Schedule, Risks, and Communications 166
Chapter 7: Managing the IT Security Project 175
Introduction 176
Initiating the IT Security Project 176
Monitoring and Managing IT Security Project Progress 177
Monitoring IT Security Project Risk 185
Managing IT Security Project Change 186
Testing IT Security Project Results 189
Chapter 8: Closing Out the IT Security Project 197
Introduction 198
Evaluating Project Completion 198
Closing Issues Log, Change Requests, and Error Reports 200
Preparing for Implementation, Deployment, and Operational Transfer 201
Reviewing Lessons Learned 206
Documentation and Compliance Reports 209
Chapter 9: Corporate IT Security Project Plan 217
Introduction 218
Defining Your Security Strategy 218
Legal Standards Relevant to Corporate IT Security 220
Corporate IT Security Project Plan Overview 240
Corporate Security Auditing 243
Corporate IT Security Project Parameters 252
Project Work Breakdown Structure 267
Project Risks 273
Project Constraints 275
Project Assumptions 276
Project Schedule and Budget 276
Chapter 10: General IT Security Plan 289
Introduction 290
IT Security Assessment and Auditing 290
Authentication 326
Access Control 330
Auditing 332
Attacks 338
Assessment and Audit Report 343
Project Plan 348
General IT Security Project Parameters 353
General IT Security Project Plan 362
Chapter 11: IT Infrastructure Security Plan 373
Introduction 374
Infrastructure Security Assessment 374
Project Parameters 436
Project Team 447
Project Organization 448
Project Work Breakdown Structure 448
Project Risks and Mitigation Strategies 455
Project Constraints and Assumptions 457
Project Schedule and Budget 459
IT Infrastructure Security Project Outline 460
Chapter 12: Wireless Security Project Plan 469
Introduction 470
Wireless Security Auditing 471
Wireless Security Project Parameters 513
Project Team 528
Project Organization 529
Project Work Breakdown Structure 530
Project Risks 534
Project Constraints and Assumptions 535
Project Schedule and Budget 536
Wireless Security Project Outline 537
Chapter 13: IT Operational Security Plan 545
Introduction 546
Operational Security Assessment 547
Project Parameters 593
Project Team 605
Project Organization 606
Project Work Breakdown Structure 607
Project Risks and Mitigation Strategies 612
Project Constraints and Assumptions 614
Project Schedule and Budget 614
IT Operational Security Project Outline 615
Index 625