5.8 Information Security in Project Management

Information security should be integrated into project management.

Regardless of a project’s complexity, size, duration, or application, security should be considered in every project at an early stage. Every project should require that information security risk be assessed and treated initially. Intellectual property rights are addressed, and internal and external communications are considered throughout the project.

Security measures differ from one project to another depending on the nature of the project. Nonetheless, the adequacy of information security considerations and activities should be evaluated at predefined stages by an appropriate individual or governing body, such as Project Steering Committee. In addition, responsibilities, and authorities for information security relevant to the project should be defined.