Project Management in Information SecuritySillabus

Fənn kodu

MM-1406-EN

Kredit

6

Tələbənin iş yükü

150

Semestr

Payız semestri

Akademik il

2

Fənnin tipi

Məcburi

Təhsil forması

Əyani

Tədris dili

İngilis

Auditoriyadaxili saatlar

Lectures 15 hours Seminars 30 hours

Auditoriyadan kənar saatlar

Independent study 50 hours

This course covers the theoretical and practical foundations of planning, organizing, implementing, monitoring, and evaluating information security projects. It examines the definition of project objectives and scope, development of project plans, organization of resources and task allocation, and management of schedules, budgets, and risks. The course also addresses the definition of security requirements, communication among project stakeholders, implementation of security controls, monitoring of project execution, quality evaluation, and incident management. It develops students’ theoretical knowledge and practical skills in systematically planning and managing information security projects, assessing security risks and resources, overseeing project implementation, and achieving secure and effective project outcomes in line with established objectives.

• mühazirə
• interaktiv müzakirə
• təqdimatlar
• seminar

1. 1

   CLO 1: Explain the fundamental principles of information security project management, relevant international standards (ISO/IEC 27001, NIST, and PMBOK), and methodologies such as Waterfall, Agile, and DevSecOps.

2. 2

   CLO 2: Apply the project management triangle—scope, time, and cost—and the associated resource and risk management trade-offs to cyber-resilience projects.

3. 3

   CLO 3: Analyze technical, organizational, and regulatory compliance challenges that may arise in information security projects and propose appropriate solutions.

4. 4

   CLO 4: Interpret the results of security audits, penetration tests, and risk assessments, and prepare technical and management reports.

5. 5

   CLO 5: Develop and professionally present a comprehensive information security project as part of a team, including a Work Breakdown Structure (WBS), risk matrix, and budget.

1. 1.
   Introduction to Information Security Project Management and Core Concepts Mühazirə

   This topic introduces the fundamental principles, objectives, and methodological approaches of information security project management. Students examine the stages of project planning, organization, execution, monitoring, and closure. The responsibilities of project managers and project teams, identification of stakeholders, and alignment of project objectives with an organization’s security strategy are explored. Traditional and modern project management approaches, project management frameworks, and the specific characteristics of information security projects are also discussed.

2. 2.
   Scope, Schedule, and Resource Management in Information Security ProjectsMühazirə

   This topic covers defining project scope, planning activities, developing schedules, and allocating resources efficiently. Students learn to define project objectives and deliverables, structure work using a Work Breakdown Structure (WBS), identify project phases and dependencies, and estimate time and labor requirements. The management of delays, uncontrolled scope changes, and resource shortages is examined, together with project plan monitoring and change approval mechanisms

3. 3.
   Risk Management and Assessment in Information Security Projects Mühazirə

   This topic examines the principles of identifying, analyzing, and managing technical, organizational, financial, and operational risks in information security projects. Students learn to identify risks, assess their likelihood and impact, develop risk registers, and establish priorities. Risk response strategies—including mitigation, transfer, acceptance, and avoidance—are explored. The topic also addresses continuous risk monitoring, contingency planning, and risk-based decision-making.

4. 4.
   Budget, Cost, and Procurement Management in Information Security ProjectsMühazirə

   This topic covers financial planning, budget development, cost estimation, and procurement management in information security projects. Students examine the costs associated with security software, hardware, licenses, cloud services, consulting services, and human resources. Budget preparation, cost monitoring, comparison of planned and actual expenditure, and analysis of financial variances are discussed. The topic also addresses vendor selection, procurement criteria, contract evaluation, and verification that procured solutions meet project security requirements.

5. 5.
   Quality, Communication, and Stakeholder Management in Information Security ProjectsMühazirə

   This topic examines quality assurance, effective communication, and stakeholder relationship management in information security projects. Students learn to define quality criteria, verify compliance with security requirements, and organize testing and acceptance procedures. Communication among project teams, management, IT departments, security specialists, vendors, and other stakeholders is explored. The topic also covers communication planning, reporting, conflict management, expectation alignment, and transparent decision-making.

6. 6.
   Agile and DevSecOps Methodologies and the Integration of Security into ProjectsMühazirə

   This topic focuses on applying Agile project management and DevSecOps practices to information security projects. Students examine Agile principles, Scrum and Kanban, iterative planning, sprint organization, and continuous feedback. The integration of security requirements from the earliest project stages, secure programming, automated code and vulnerability scanning, and security testing within CI/CD pipelines are discussed. The topic also explores integrating security activities into development and operations, detecting risks early, and continuously evaluating product security.

7. 7.
   Compliance, Auditing, and Project ClosureMühazirə

   This topic covers evaluating information security projects for compliance with legislation, regulatory requirements, international standards, and internal organizational policies. Students examine documentation, collection of audit evidence, and identification of non-conformities with reference to ISO/IEC 27001 and other relevant security standards and compliance requirements. Acceptance of project deliverables, verification of security requirements, and documentation of outstanding issues and residual risks are discussed. The topic also addresses preparation of final reports, closure of budgets and resource commitments, lessons learned, and recommendations for improving future projects.

1. Skulmoski, G. J. Shields Up: Cybersecurity Project Management. New York: Business Expert Press, 2022, 204 с.
2. Edwards, J., & Weaver, G. The Cybersecurity Guide to Governance, Risk, and Compliance. Hoboken, New Jersey: Wiley, 2024, 672 с.
3. Workman, M. Information Security Management. 2-е изд. Burlington, Massachusetts: Jones & Bartlett Learning, 2021, 462 с.