Recovering Security in Program Management

Many project management training courses include sound advice about incorporating security early in design and development. After project launch, good intentions can fall by the wayside as victims of schedule and cost pressure. Later in the project lifecycle, demands for certification and accreditation force project managers to recover security. This paper works through some of the challenges to rebuilding a reasonable security profile in an ongoing project and should be of interest to the person called in to fix security after the damage has occurred.