Project Management in Information Security

Description

This course covers the theoretical and practical foundations of planning, organizing, implementing, monitoring, and evaluating information security projects. It examines the definition of project objectives and scope, development of project plans, organization of resources and task allocation, and management of schedules, budgets, and risks. The course also addresses the definition of security requirements, communication among project stakeholders, implementation of security controls, monitoring of project execution, quality evaluation, and incident management. It develops students’ theoretical knowledge and practical skills in systematically planning and managing information security projects, assessing security risks and resources, overseeing project implementation, and achieving secure and effective project outcomes in line with established objectives.

Course learning outcomes

1. 1

   CLO 1: Explain the fundamental principles of information security project management, relevant international standards (iso/iec 27001, nist, and pmbok), and methodologies such as waterfall, agile, and devsecops.

2. 2

   CLO 2: Apply the project management triangle—scope, time, and cost—and the associated resource and risk management trade-offs to cyber-resilience projects.

3. 3

   CLO 3: Analyze technical, organizational, and regulatory compliance challenges that may arise in information security projects and propose appropriate solutions.

4. 4

   CLO 4: Interpret the results of security audits, penetration tests, and risk assessments, and prepare technical and management reports.

5. 5

   CLO 5: Develop and professionally present a comprehensive information security project as part of a team, including a work breakdown structure (wbs), risk matrix, and budget.