Search results

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Information security in project management

    In short, you can think about the inclusion of information security in project management as if you are going to implement a small ISMS that will fit the project's needs and be proportional to the project's lifetime and budget.

    Considering that, these are some evidence you should consider:

    • definition of information security objectives and include them in the project objectives, the same way you define information security objectives for an ISMS aligned with the organization's objectives, the only difference is that these objectives are restricted to the scope of the project.
    • initial and regular information risk assessment in the project and identification of applicable legal requirements, like you would do it with other business processes, to identify necessary controls (the controls you mentioned should be based on this step)
    • evidence related to the implemented controls (e.g., backup media, in the control A.12.3.1 Information backup is implemented).

    This article will provide you a further explanation about Information security in project management:

  • Auditing Extrusion

    As you know, your control plan starts with the incoming inspection process and shows all the stages of the shipment process to the customer. Therefore, all these processes should be audited as manufacturing process audits according to your control plan. In fact, these processes should be audited until the shift they work, and auditors should audit shift changes. Because all these processes play a critical role in providing products to the customer and in case of deficiency, they will return to you as a customer complaint and as you know the 8D process starts.

    For more information, please read the following articles:

Didn’t find an answer?

Start a new topic and get direct answers from the Expert Advice Community.

CREATE NEW TOPIC +