Project Management in Information SecurityMövzu planı

This topic introduces the fundamental principles, objectives, and methodological approaches of information security project management. Students examine the stages of project planning, organization, execution, monitoring, and closure. The responsibilities of project managers and project teams, identification of stakeholders, and alignment of project objectives with an organization’s security strategy are explored. Traditional and modern project management approaches, project management frameworks, and the specific characteristics of information security projects are also discussed.

This topic covers defining project scope, planning activities, developing schedules, and allocating resources efficiently. Students learn to define project objectives and deliverables, structure work using a Work Breakdown Structure (WBS), identify project phases and dependencies, and estimate time and labor requirements. The management of delays, uncontrolled scope changes, and resource shortages is examined, together with project plan monitoring and change approval mechanisms

This topic examines the principles of identifying, analyzing, and managing technical, organizational, financial, and operational risks in information security projects. Students learn to identify risks, assess their likelihood and impact, develop risk registers, and establish priorities. Risk response strategies—including mitigation, transfer, acceptance, and avoidance—are explored. The topic also addresses continuous risk monitoring, contingency planning, and risk-based decision-making.

This topic covers financial planning, budget development, cost estimation, and procurement management in information security projects. Students examine the costs associated with security software, hardware, licenses, cloud services, consulting services, and human resources. Budget preparation, cost monitoring, comparison of planned and actual expenditure, and analysis of financial variances are discussed. The topic also addresses vendor selection, procurement criteria, contract evaluation, and verification that procured solutions meet project security requirements.

This topic examines quality assurance, effective communication, and stakeholder relationship management in information security projects. Students learn to define quality criteria, verify compliance with security requirements, and organize testing and acceptance procedures. Communication among project teams, management, IT departments, security specialists, vendors, and other stakeholders is explored. The topic also covers communication planning, reporting, conflict management, expectation alignment, and transparent decision-making.

This topic focuses on applying Agile project management and DevSecOps practices to information security projects. Students examine Agile principles, Scrum and Kanban, iterative planning, sprint organization, and continuous feedback. The integration of security requirements from the earliest project stages, secure programming, automated code and vulnerability scanning, and security testing within CI/CD pipelines are discussed. The topic also explores integrating security activities into development and operations, detecting risks early, and continuously evaluating product security.

This topic covers evaluating information security projects for compliance with legislation, regulatory requirements, international standards, and internal organizational policies. Students examine documentation, collection of audit evidence, and identification of non-conformities with reference to ISO/IEC 27001 and other relevant security standards and compliance requirements. Acceptance of project deliverables, verification of security requirements, and documentation of outstanding issues and residual risks are discussed. The topic also addresses preparation of final reports, closure of budgets and resource commitments, lessons learned, and recommendations for improving future projects.