Scoping Security Assessments - A Project Management Approach

Security assessment projects have a beginning and an end, and produce a unique value to the organization. However, security assessments constitute a special type of project, where it is often a challenge to identify the project objectives, as well as to scope the time and effort needed to complete the security assessment. The goal of this paper is to take a project management approach to scoping security assessments to make scoping easier. The result will be more effective and efficient security assessments, which produce more value to the organization.