As part of the IT Security Program, the CISO's Program Management Staff are responsible for creating and managing projects which are used to bring in, test, and deploy new security related products and services. One of the primary responsibilities of project managers is ensuring that the security products or services meet the stated functional requirements -- the "quality" targets. (The products or services must deliver the specified enterprise security functionality.) The project manager for this effort must also ensure that the products / services are delivered according to schedule ("time") and within the budgeted costs ("cost"). These three factors are called the "project management constraints:"
- Cost
- Quality (meeting requirements)
- Time
Choose theconstraint("factor") that you believe should be prioritized when managing an IT acquisition project. Write a 3 to 5 paragraph briefing statement in which you identify and then defend your selection. Your statement should address the following items:
1. Provide definitions for each of the constraints
2. Identify your chosen constraint and provide a more detailed description of how this constraint impacts project management (what happens to the other two factors). For example, if you decide that cost is the most important factor, explain the tradeoffs you might need to make with respect to quality and schedule. Or, if you decide that quality is most important (e.g. correct implementation of security controls), explain how that might affect cost and schedule.
3. Provide a closing summary of the importance of project management for IT acquisitions (with respect to the overall IT security program).
Provide in-text citations and references for 3 or more authoritative sources. Put the reference list at the end of your article.