Information security in project management

Why it matters

Security bolted on after a project ships is far more expensive than security designed in from the start.

How a self-led small team implements it

Add one security checklist item to whatever project template you already use — don't build a parallel process.

What auditors expect to see

Project templates or checklists showing a security review step.

More organizational controls

• A.5.1 Policies for information security
• A.5.2 Information security roles and responsibilities
• A.5.3 Segregation of duties
• A.5.4 Management responsibilities