Work Breakdown Structure – Templates from Previous Projects
Total Page:16
File Type:pdf, Size:1020Kb
Basics of Security Project Management 1 2 1 2 3 4 Ensure that the necessary Project Plan will improve the Time and attention to detail Repeatable, stable, and preventative, detective, and protection of company thorough process that can be corrective measures will be assets. applied implemented following a risk assessment. 3 Learning Objectives Identification of Planning steps ✓ Specification ✓ Global Structure ✓ Project Breakdown Consideration of ✓ Task Delegation Planning Resources ✓ Time Estimation 2 1 ✓ Identification of needed resources ✓ Integration of Time/Personnel ✓ Setting Controls/Gates Team Planning: Applications of Skills Who? What? 4 3 Where? When? Why? How? Refinement of the Risks identification & Security Project 6 5 considerations Initiation Stage 4 5 Project Planning Activities Specific Goals of the Project 1 Estimates to be prepared for Specific Work to be formed 2 3 planning, tracking and controlling the project. Commitments established 4 5 Documentation of project with affected groups alternatives, assumptions, and constraints Creation of baseline plans from which 6 the security project will be managed. 6 “Fail to Plan, Plan to Fail.” Risk, Threat, & Recommended PPS Vulnerability Project Scope Procurement Safeguards Requirements Assessment Document Approach Document Design Sole Source Business Performance Capacity Criteria & Justification Objectives requirements Requirements Requirements 7 Essential Project Planning Steps 8 Questions to Answer During Planning Point 1 What is the real purpose of this project? What methods, processes, or actions were used Point 2 to define the project? What will the results of this project do for the Point 3 stakeholders? What is the priority of this project, how was that Point 4 priority determined, and how does it compare with that of other current projects? 9 NOTE: The documentation prepared during the planning stage is called the project scope document. Executive Summary Estimated Duration Project Objectives Assumptions Project Project Scope Scope Major Risks Document Estimated Project Objectives Hours Estimated Cost Major Risks 10 Project Team ✓ Should contain a representative from each functional area. ✓ Varying skillsets on the team ✓ If no skills available, the client should supplement with outside consultants ✓ Be wary of bringing in a large team. It may prevent a team from oalescing ✓ Project team understands how their tasks fit into the overall project and their impact upon the project. 11 Types of Information the Team will Gather 1 Organizational Charts Maps showing work areas, buildings, security posts, 2 vital equipment areas, and material storage areas. 3 Facility Protection Plans Security plans for new areas under construction and 4 temporary material storage area. 5 Plans for decommissioning existing systems. 6 Past security survey reports 12 Types of Information the Team will Gather 1 Facility Asset Lists 2 Facility prioritization Identification of preferred methods of attack on the 3 facility. Identification of security measures (prevention, detection, correction) that are most critical in 4 providing protection for assets. Identification of the last possible point at which an adversary must be detected to allow adequate 5 response. 6 Defense-in-Depth measures 13 Amount of PLANNING contingent on SCOPE of project 14 15 16 17 Project Risk Management ) 18 Learning Objectives ✓ Understand risk and the importance of good project risk management ✓ Discuss the elements of planning risk management and the contents of a risk management plan ✓ Common sources of risks on a security project ✓ Describe the process of identifying risks and create a risk register ✓ Discuss the elements involved in risk management planning and the contents of a risk management plan 19 Importance of Project Risk Management • Project risk management is the art and science of identifying, analyzing, and responding to risk throughout the life of a project and in the best interests of meeting project objectives • Risk management is often overlooked in projects, but it can help improve project success by helping select good projects, determining project scope, and developing realistic estimates. 20 Project Risk Management Monitoring & Controlling Processes Planning Processes Initiating Enter phase / Start project Closing Exit phase / End project Processes Processes Executing Processes Knowledge Process Area Initiating Planning Executing Monitoring & Contol Closing Risk Plan Risk Management Monitor and Control Risks Identify Risk Perform Qualitative Risk Analysis Perform Quantitative Risk Analysis Plan Risk Response 21 Project Risk Management ✓ Risk is an uncertain event or condition that, if occurs, has an effect on at least one project objective. ✓ Risk management objectives: ✓ increase the probability and impact of positive events (opportunities). ✓ decrease the probability and impact of negative events (threat). ✓ Terms & concepts: ✓ Uncertainty: a lack of knowledge about an event that reduces confidence ✓ Risk averse: someone who does not want to take risks. ✓ Risk tolerances: area of risk that are acceptable/unacceptable. ✓ Risk thresholds: the point at which a risk become unacceptable ✓ Remember that in this area there is no activity in executing process group 22 Project Risk Management Summary 23 Negative Risks ✓ A dictionary definition of risk is “the possibility of loss or injury” ✓ Negative risk involves understanding potential problems that might occur in the project and how they might impede project success ✓ Negative risk management is like a form of insurance; it is an investment ✓ If Security Projects are so risky, why do companies pursue them? 24 Positive Risk ✓ Positive risks are risks that result in good things happening; sometimes called opportunities ✓ A general definition of project risk is an uncertainty that can have a negative or positive effect on meeting project objectives ✓ The goal of project risk management is to minimize potential negative risks while maximizing potential positive risks 25 Broad Categories of RISK 1 Market Risk 2 Financial Risk 3 Technology Risk 4 People Risk 5 Structure / Process Risk 26 Risk Factors The Probability Range of Expected The anticipated that it will occur possible Timing frequency of outcome (When) risk event (Impact) in the project (How Often) life cycle 27 Plan Risk Management Outputs Inputs 3 ➢ Risk ➢ Project Scope Statement Management ➢ Cost Management Plan Plan ➢ Schedule Management Plan ➢ Communication Management Plan ➢ Enterprise Environmental Factors ➢ Organizational Process Assets 2 Tools & Techniques 1 ➢ Planning meetings and analysis 28 Plan Risk Management ✓ Ensure that the degree, type, and visibility of risk management are commensurate Importance ✓ Provide sufficient resource and time for risk management activities ✓ Establish an agreed-upon basis for evaluating risk ✓ A standard list of risk categories can help to make sure Plan Risk Risk areas of risk are not forgotten. Mgmt. Categories ✓ Companies and PMO should have standard list of risk categories to help identify risk. Two Main ✓ Business – Risk of gain or loss Types of ✓ Pure (insurable) risk – Only a risk of loss (i.e. fire, theft, Risk personal injury, etc) 29 Planning Risk Management ✓ The main output of this process is a risk management plan o a plan that documents the procedures for managing risk throughout a project. ✓ The project team should review project documents and understand the organization’s and the sponsor’s approaches to risk. ✓ The level of detail will vary with the needs of the project. 30 Risk Management Plan ✓ Risk management plan describe how risk management will be structured and performed on the project. ✓ Subset of project management plan. ✓ May includes: o Methodology o Definition of probability and impact o Roles & responsibilities o Stakeholder tolerances o Budgeting o Reporting formats o Timing o Tracking o Risk categories. o Probability and impact matrix (?) 31 Test Your Knowledge Project managers document the possible project risks in the: ❑ Risk Register ❑ Project Charter ❑ Risk Management Plan ❑ Project Scope Statement 32 Test Your Knowledge Project managers document the possible project risks in the: Answer: An effective project manager reviews past project reports, documents and other information to ❑ Risk Register generate a comprehensive Risk Register. The project manager typically starts by meeting with the stakeholders to identify all project risks. He also gathers input from all the project team members. 33 Test Your Knowledge Qualitative risk analysis typically involves examining historical information to make informed decisions while for each possible outcome, quantitative risk analysis identifies the: ❑ Cost and time ❑ Type and category ❑ Formal and informal ❑ Magnitude and probability 34 Test Your Knowledge Qualitative risk analysis typically involves examining historical information to make informed decisions while for each possible outcome, quantitative risk analysis identifies the: Answer: Quantitative risk analysis results in identifying ❑ Magnitude and probability the magnitude or severity of negative outcomes and the likelihood or probability for all outcomes. To analyze project risk effectively, successful project managers examine each risk to determine its probability and impact to the project. They translate this into numerical values that represent the risk to the project in terms of cost, time and resources factors. 35 Test Your Knowledge During risk management planning, team members identify the triggers