Development and Inclusion of Information Security specific process(es) in PMBOK to equip PM and PM team to better manage and handle security of all sensitive Project Information/data during project d
Rohit Kumar GoelCybersecurity | IT Consultant| Various ClientsDwarka, New Delhi, Delhi, India
In today’s scenario, I feel Information Security has become one of the most critical requirement and challenge for most organizations/industries whether or not an organization has a mature and robust security culture, setup and resources in place. Especially, Security attacks such as ransomware today can easily impact adversely a project’s schedule, cost baseline/budget or even the complete project outcome, if such an attack is able to render project information/data unavailable while project is still underway. On the other hand leakage of sensitive information/data during project may also adversely impact customer confidence and contractual obligations leading to premature project termination or in form of penalties or some legal action.
Therefore, I am of the opinion that PM and PM team should have some basic level of awareness and should be equipped with some tools and techniques to take care of security of all sensitive project information belonging to their project during entire project life cycle. And for this purpose, it may help if one or more dedicated processes pertaining to Information Security inlcuding relevant tools and techniques are defined and included in PMBOK to help PM and PM team to effectively handle security of all sensitive project information/data generated/used during project duration. Such an awareness, knowledge and availability of some tools & techniques with PM and PM team will compliment an organization that has some mature/robust security system and culture in place, Whereas, in case of other organizations that have a weak or no Security culture/Program in place, PM and the PM team using Information Security relevant process(es) and tools & techniques will be able to better handle and manage security of all sensitive project Information generated/used during the project duration in a reliable manner in addition to taking help of a SME if available on such matters.
Request valued feedback and expert opinion on the above. Saving Changes...
