Information Security Best Practices While Managing Projects

To maximize long-term return on investment (ROI) with a project's delivery, taking information security into account with all aspects of an environment is essential. Fortunately, there are opportunities for project managers to incorporate the application of information security best practices with their projects. The goal of this paper is to bring a deeper understanding of why information security should be front and center to all project stakeholders. The article will discuss ways that project managers can incorporate information security best practices by the use of (1) vendor selection and management, (2) risk assessments, (3) contract negotiation and business associate agreements, and (4) how information security plays a significant role in all phases of a project's life cycle (initiation, planning, execution, monitoring and controlling, and closure). By understanding and following these information security practices, project managers ensure that their projects do not introduce their organization to unneeded risk, thereby saving the organization time and money.